ETHERFAX incident
Temporary Corporate Website Restriction - PHP Security Update
Resolved after 15 hours 52 minutes, on October 21, 2026.
The corporate website hosting provider has completed patching. Additional protection mitigations remain attached to the CDN layer should this vulnerability evolve over the coming days. The ETHERFAX security team has restored access to the corporate website. Thank you for your patience.
Update timeline
- monitoring Oct 21, 2026, 04:08 PM UTC
As a precaution, we have temporarily restricted public access to the ETHERFAX corporate website. This step aligns with guidance from leading cybersecurity firms regarding a recently disclosed critical PHP vulnerability.Production systems are unaffected. All ETHERFAX production services including API, client portals, partner portals, APIs, and all customer environments continue to operate normally. Those environments do not utilize PHP. We expect to restore website access once our hosting provider confirms a patched PHP version is in place. For assistance in the meantime, contact support at [email protected]. Thank you for your patience.
- monitoring Oct 21, 2026, 04:38 PM UTC
Patches and mitigating steps for the PHP vulnerabilities have begun to be released. Our corporate website hosting provider is working to roll these updates out across platforms as soon as possible. Protective mitigations have also already been deployed at the CDN layer. We will share further updates as deployment progresses. Once again this DOES NOT affect the ETHERFAX Production systems.
- resolved Oct 22, 2026, 08:00 AM UTC
The corporate website hosting provider has completed patching. Additional protection mitigations remain attached to the CDN layer should this vulnerability evolve over the coming days. The ETHERFAX security team has restored access to the corporate website. Thank you for your patience.
Your product runs on more than ETHERFAX
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.