Resolved after 5 hours 27 minutes, affecting UI and REST API and 1 more, on October 21, 2026.
Our mitigation work is complete. PIM SaaS is now running a patched version of PHP, which includes fixes for both identified vulnerabilities. PIM SaaS instances continue to operate normally, and no action is required on your end. Thank you for your understanding.
Affected components
Update timeline
- identified Oct 21, 2026, 11:30 AM UTC
We are aware of two critical PHP vulnerabilities announced yesterday and are treating this as a high-priority security matter. Protecting your business and data is our priority. Our engineering team is actively assessing the potential impact on Akeneo services, and mitigation work is already underway. In parallel, we are closely monitoring the PHP security release and will provide further updates here as our assessment and remediation progress. Your PIM instance is running normally. We will let you know if any action is required on your end. Thank you for your understanding.
- resolved Oct 21, 2026, 04:57 PM UTC
Our mitigation work is complete. PIM SaaS is now running a patched version of PHP, which includes fixes for both identified vulnerabilities. PIM SaaS instances continue to operate normally, and no action is required on your end. Thank you for your understanding.
Your product runs on more than Akeneo
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services