Kinsta incident

Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026)

Resolved after 4 days, on October 23, 2026.

resolved Oct 27, 2026, 02:06 PM UTC

We can confirm that the mitigations have been successful and no compromises have occurred as a result of this. If you have any other questions, please contact our support team at [email protected].

Started
Oct 23, 2026, 01:19 PM UTC
Resolved
Oct 27, 2026, 02:06 PM UTC
Duration
4d
Detected by Pingoru
Oct 23, 2026, 01:19 PM UTC

Update timeline

  1. investigating Oct 23, 2026, 01:19 PM UTC

    There were reports of a new vulnerability CVE-2026-115560, after the previous two were patched on October 22 on our platform. We already have mitigations against this, so there shouldn't be any incidents related to this. We'll post updates if there are any news.

  2. resolved Oct 27, 2026, 02:06 PM UTC

    We can confirm that the mitigations have been successful and no compromises have occurred as a result of this. If you have any other questions, please contact our support team at [email protected].

Your product runs on more than Kinsta

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →