In response to publicly available information published on 21 October regarding potential cybersecurity risks and a globally announced critical security vulnerability in the PHP programming language, the Latvian Medicines verification organisation (LZVO) quickly implemented the necessary system updates on its website.
LZVO would like to emphasise that the Latvian medicines verification system (LZVS), which is used in pharmacies and healthcare institutions to verify prescription medicines before they are dispensed to patients, was not exposed to the announced security risks. However, as reported by the developer Blue Bridge Technologies, SmartMedical was temporarily suspended as a precaution until midday 22 October. This affected those customers using SmartMedical and external systems integrated with it, including e-health and LZVS. LZVS operations were restored at 13:13 on 22 October.
We thank everyone for their patience and understanding during the interruption of LZVS operations.
Monitoring and securing its IT systems has always been a priority for LZVO. The team continuously monitors system performance and takes the necessary steps to ensure security.
Further information on the two critical PHP software vulnerabilities announced on 21 October 2026 is available on the CERT.LV website.