Monitoring following the emergency maintenance for CVE-2026-109618 and CVE-2026-109619 is complete. No issues have been observed across the platform.
Posted Oct 26, 2026 - 07:23 UTC
Monitoring
Patching for CVE-2026-109618 and CVE-2026-109619 has been completed across all production systems. We are monitoring the platform to ensure everything is operating normally.
Posted Oct 22, 2026 - 07:04 UTC
Update
All supported PHP versions across the platform have now been patched for CVE-2026-109618 and CVE-2026-109619. We are currently completing patching for sites running end-of-life (EOL) PHP versions.
Sites on EOL PHP versions may still experience brief service interruptions affecting uncached content while this work is completed. We will post another update once all systems have been patched.
As always, we recommend upgrading to a supported PHP version to receive security fixes as promptly as possible.
Posted Oct 21, 2026 - 19:29 UTC
Identified
Configuration mitigations were applied immediately following the security announcement, and most of the platform has now been patched for CVE-2026-109618 and CVE-2026-109619. We expect to complete patching within the next hour.
Brief service interruptions affecting uncached content may occur as maintenance is completed. We will post another update once all systems have been patched.
Posted Oct 21, 2026 - 18:24 UTC
Investigating
Emergency maintenance is currently underway across all PHP versions to address the recently disclosed PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
A brief service interruption affecting uncached content is expected during the maintenance.
We will keep you updated on any further developments.