Shared issue · Oct 21, 2026
74 companies posted about PHP
The first posted at Oct 21, 03:43 UTC, the last 2 days later.
The companies that posted are relied on by 898 other companies in our directory. Also called PHP2Shell, CVE-2026-109618, CVE-2026-109619.
When they first posted
Companies by when their status page first showed it, 2 hours a column. The most, 13, in Oct 21, 14:00–16:00 UTC.
Oct 21, 02:00 UTCOct 23, 08:00 UTC
What they said
Quoted from their status pages. Times are UTC.
- Amazee: “Critical PHP security release”
- Staffbase: “[All Systems] [Security Advisory] – Critical PHP vulnerabilities — no customer-facing service impact”
- Kiln: “Kiln Widget and Dashboard temporarily offline”
- Acorn Works: “PHP Vulnerability | AU-Gov-Cloud (Sydney)”
- Proemion: “PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619”
- Returnless: “Multiple shipping partners offline because of PHP vulnerability”
- Mews: “Critical 0 day PHP vulnerability”
- Watermelon: “Security Advisory: PHP Vulnerabilities”
- Watermark: “Tk20 Temporarily Offline as a Security Precaution”
- Aptible: “Critical PHP vulnerabilities - customer action may be required”
- Renaissance: “myIGDIs, myON, DnA, Nearpod, SchoolCity, StarPhonics, and eduCLIMBER: Potential Maintenance Today”
- Knak: “Knak PHP security patch”
- Gomomentus: “Statement on PHP CVE's CVE-2026-109618 and CVE-2026-109619”
- Honorlock: “Proactive Outage”
- Magna5: “Magna5 Cybersecurity Notification: Advance Notice of Critical PHP Vulnerabilities Pending Patch Release”
- Pantheon: “PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619”
- Nutshell CRM: “PHP2Shell Response”
- Re:amaze: “PHP Security advisory: Critical remote code execution vulnerabilities”
- Omniaretail: “PHP security vulnerability, no impact on Omnia 2.0”
- Frisbii Media: “Limited functionality in Merchant Backend and Self Service”
- Scaleway: “Emergency Maintenance - Dedibox Console”
- Linode: “Customer Security Advisory: PHP Remote Code Execution Vulnerabilities”
- Accrisoft: “Critical Software vulnerabilities”
- Pipedrive Marketplace: “Recent PHP Security Vulnerabilities: No Action Required”
- Auvik: “PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)”
- Ottomatic Cloud: “PHP Security Update - Identified”
- Stensul: “Resolved — Stensul service fully restored”
- Felix: “PHP security vulnerability (CVE-2026-109618 and CVE-2026-109619) - Emergency Patch”
- Lightspeedhq: “Statement on PHP vulnerabilities”
- Kadence: “Temporary limitation on file uploads”
- Digistorm: “Outage Identified”
- ePraise: “Services Temporarily Offline for PHP Patching”
- Raptor Technologies: “PublicSchoolWORKS - PHP Vulnerability Update”
- iSpot: “PHP Security Vulnerabilities”
- Eptura: “Serraview Advisory: PHP Security Update and Planned Maintenance”
- Connectwise Manage: “Backup for Files Portal Unavailable: Security Precaution”
- Blackbaud: “Active Issue Alert – Blackbaud Education Management Solutions, Blackbaud eTapestry® - #000698846”
- Thrivelearning: “PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)”
- Acquia Optimize: “Acquia Cloud Platform management services temporarily unavailable”
- Cloudinary: “Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619”
- Intiveo: “Intiveo Systems Responding to PHP2Shell”
- AudioEye: “PHP security vulnerabilities”
- Kombo: “Third-party API downtime following php2shell”
- Kinsta®: “PHP Security Vulnerability Update”
- RadarFirst: “RadarFirst statement on PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell")”
- Float: “Security Maintenance – Infrastructure Component Update”
- Articulate: “Articulate Blog: Temporarily offline for maintenance”
- Cin7: “Cin7 ForesightAI will be temporarily unavailable while we patch the PHP vulnerability”
- Engaging Networks: “PHP Security Vulnerabilities”
- Vasion: “October 21, 2026: External Security Advisory Affecting Vasion Products (PHP Remote Code Execution Vulnerabilities and eMudhra Intermediate CA Compromise)”
- Huntress: “Curricula Simulated Phish Service is down.”
- Instructure: “PHP awareness”
- Chainguard: “Critical PHP vulnerabilities require updates”
- HubSpot: “Update on PHP security vulnerability”
- Soprano Design: “Security Advisory: Recent PHP Vulnerabilities - Soprano Platform Is Not Affected”
- NavVis: “Security Update: PHP2Shell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)”
- Medius: “Medius Security Advisory: PHP2Shell Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)”
- Amplience: “PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)”
- Cronofy: “PHP Remote Code Execution Vulnerabilities”
- Everway: “Security update: Global PHP vulnerabilities and Everway products”
- Supermetrics: “Security Advisory: PHP Vulnerabilities, October 21, 2026”
- Zapier: “Assessment of recently reported PHP vulnerabilities”
- Chargebee: “Subject: Security Notice: No Impact from PHPshell Zero-Day Vulnerability”
- Deque: “Informational: PHP Vulnerability Vulnerabilities – No Customer Action Required”
- Alloy: “Security Advisory Notice: Alloy Unaffected by Reported PHP Vulnerabilities”
- DoseSpot: “Incident Resolved: PHP Vulnerability (php2shell) – No Impact Identified”
- Obsidiansecurity: “Security Advisory: PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)”
- Astronomer: “PHP Security Advisory: Astro and Astro Private Cloud Not Affected; Review Custom Images”
- Couchdrop: “Security Advisory: Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) - Not Affected”
- Amplitude: “Notice: Amplitude not impacted by recent PHP vulnerabilities”
- Top Hat: “Security Update: Top Hat & Aktiv Unaffected by Recent PHP Vulnerabilities”
- GoDaddy: “PHP Vulnerability Information”
- Notion: “PHP2Shell (CVE-2026-109618, CVE-2026-109619)”
- Primer (primer.io): “This week’s security disclosures: what they mean for Primer merchants”
Find out when the next one touches your vendors
Start with your domain. We read its DNS for the services it uses, you add the rest of your vendors, and we email you when one of them posts trouble on its status page, or when trouble like this reaches them.
Start with your domainMore moments
Caught as it happened, by reading companies' status pages. Status pages say what each company chose to post; a company not listed may have had the same trouble and said nothing.