Knak PHP security patch

Update timeline

1. investigating Oct 21, 2026, 01:28 PM UTC

   Our Engineering and Security teams are responding to PHP2SHELL, a recently disclosed vulnerability in widely used web software, including components Knak relies on. We are actively monitoring our systems and applying protective measures. Protecting your data comes first. If we see a threat that needs further action, we may take Knak offline temporarily, possibly with little advance notice. We know any disruption affects your team’s ability to build and launch campaigns. We apologize for the inconvenience and will post updates on our status page as they become available.

2. investigating Oct 21, 2026, 02:27 PM UTC

   We're actioning a patch

3. investigating Oct 21, 2026, 02:28 PM UTC

   We're actioning a patch.

4. investigating Oct 21, 2026, 03:12 PM UTC

   We’ve applied the patch and are currently testing it before bringing Knak back online. Our preliminary investigation has shown no indication that Knak has been compromised. We’ll let you know as soon as Knak is back up.

5. identified Oct 21, 2026, 03:32 PM UTC

   The issue has been identified and a fix is being implemented.

6. monitoring Oct 21, 2026, 03:45 PM UTC

   A fix has been implemented and we are monitoring the results.

7. monitoring Oct 21, 2026, 03:59 PM UTC

   We are continuing to monitor for any further issues.

8. monitoring Oct 21, 2026, 04:03 PM UTC

   We are continuing to monitor for any further issues.

9. resolved Oct 21, 2026, 07:05 PM UTC

   This incident has been resolved.