Resolved after 6 hours 5 minutes, affecting Platform Updates / Other, on March 18, 2026.
We have taken steps to prohibit execution of files exploiting the "PolyShell" unrestricted file upload vulnerability across our managed fleet. If you have any questions or concerns. You can reach us through the following channels: Live Chat: https://my.nexcess.net/ Email: [email protected]
Affected components
Update timeline
- investigating Mar 18, 2026, 04:17 PM UTC
We are aware of recent reports regarding a potential unrestricted file upload vulnerability, commonly referred to as “PolyShell”, affecting Magento and Adobe Commerce. At this time, our teams are actively reviewing our environment to assess any potential impact and determine whether any systems/customer sites may be affected. We will provide further updates as more information becomes available. If you have any questions or concerns. You can reach us through the following channels: Live Chat: https://my.nexcess.net/ Email: Nexcess Support
- resolved Mar 18, 2026, 10:23 PM UTC
We have taken steps to prohibit execution of files exploiting the "PolyShell" unrestricted file upload vulnerability across our managed fleet. If you have any questions or concerns. You can reach us through the following channels: Live Chat: https://my.nexcess.net/ Email: [email protected]
Your product runs on more than Nexcess
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services