PHP vulnerability

Update timeline

1. investigating Oct 21, 2026, 10:55 AM UTC

   We are aware of two recently discovered security vulnerabilities in PHP, a technology used by many websites. These vulnerabilities could potentially be exploited by attackers, which is why they are being treated as a high priority across the industry. Our technical teams are already preparing to implement the necessary security updates as soon as they become available. You do not need to take any action at this time. We are actively monitoring the situation and will share further updates through here.

2. identified Oct 21, 2026, 01:42 PM UTC

   As we implement countermeasures to prevent malicious activity, some services may be temporarily disrupted. This includes uploads to websites, direct database access and calendar synchronization with third-party email applications. We are sorry for the inconvenience.

3. identified Oct 21, 2026, 02:41 PM UTC

   The PHP security update is available and is currently being rolled out to our systems. Our technical teams are working on the rollout with full dedication. As soon as it is completed, we will inform you via this status page.

4. identified Oct 21, 2026, 02:52 PM UTC

   All currently supported PHP version have now been patched. Thats PHP 8.2, 8.3 8.4 & 8.5 Older version are still being worked on. We will keep you updated when this is done

5. monitoring Oct 21, 2026, 04:44 PM UTC

   Progress is being made, and CalDAV and phpMyAdmin are back online again We are actively monitoring the situation and will share further updates through here.

6. resolved Oct 22, 2026, 05:20 AM UTC

   We have now updated all available PHP versions, and all temporary countermeasures implemented during the event have been rolled back. We consider the incident resolved. However, we will continue to closely monitor the situation to ensure ongoing stability.