Productsup Status

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Processing times have been back to normal since Monday, 19 October, at about 17:00 CEST. We have monitored the platform since then and confirmed that imports, exports and runs are completing at their usual speed, including during peak hours.

Between 13 and 19 October, a significant increase in the volume of data being processed on our platform used up our processing capacity. As a result, runs took longer than usual and some were delayed, especially at peak times. Once the source of the additional volume was identified, it was paused, and processing capacity returned to normal.

To detect this kind of capacity pressure earlier, we have added new monitoring of processing load and queue build-up.

We apologize for the inconvenience. If you still see unexpected delays on your sites, please contact our Support team.

Investigating: We are still seeing elevated load on our data processing infrastructure. Imports, exports and runs continue to complete, but run times are longer than usual, especially during peak hours. Our load has stayed at this level since 13 October. The increase is linked to a significant growth in the volume of data being processed on the platform.

Because the load has not eased, customers should expect delays to continue through the weekend. Runs that depend on strict timing, such as scheduled exports with a delivery deadline, may be affected.

We will post our next update if the situation changes. In the meantime, we apologize again for the inconvenience and thank you for your continued support.

Investigating: Since 13 October, we have seen elevated load on our data processing infrastructure. Some customers may see longer run times, and runs may be delayed, especially during peak hours. Imports, exports and runs still complete, but they take longer than usual.

Our engineering team is actively investigating and working to restore normal processing times. No data is lost.

We will post another update by 20:00 CEST, or sooner if anything changes. We apologize for the inconvenience.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.

Resolved: Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services.

All affected services have been updated to patched PHP releases and restarted.

Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems.

No customer action is required. This incident is now resolved.

Investigating: On 21 October 2026, the PHP project released security updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our teams began remediation immediately.

We have applied the patched PHP versions to the large majority of our internet-facing infrastructure and restarted the affected services. Remediation of the remaining systems is in progress, and we are applying additional protective measures where updates are not yet available from upstream providers.

We have found no evidence of exploitation affecting our platform, and investigation is ongoing. No customer action is required at this time.

We will post another update once remediation is complete.

Investigating: We are performing emergency maintenance to address an issue affecting PHP. During this maintenance, some services may experience brief interruptions or temporary unavailability.

We are working to complete the maintenance as quickly as possible and will provide updates as needed.

Thank you for your patience and understanding.