Primer incident

This week’s security disclosures: what they mean for Primer merchants

Resolved after 7 days 5 hours, on October 23, 2026.

resolved Oct 30, 2026, 03:13 PM UTC

The security disclosure announcement explaining that Primer was not affected or impacted by the recently discovered vulnerabilities with PHP and certificate management has now been removed from the Status Page.

Started
Oct 23, 2026, 09:58 AM UTC
Resolved
Oct 30, 2026, 03:13 PM UTC
Duration
7d 5h
Detected by Pingoru
Oct 23, 2026, 09:58 AM UTC

Update timeline

  1. monitoring Oct 23, 2026, 09:58 AM UTC

    Several security issues were disclosed this week. Here is where Primer stands on the two we’ve been asked about most. PHP vulnerabilities: Primer does not use PHP, so our platform and integrations are not affected. If your own site or tools run on PHP (for example WooCommerce), check with your developers or hosting provider and apply the patches. eMudhra certificate compromise: On 19 October, private keys for several eMudhra intermediate certificates were reported as compromised. As a precaution, we have updated the certificate trust stores across our services. No action is needed on your Primer integration. Your own website, hosting or CDN providers may be affected separately, so check with them.

  2. resolved Oct 30, 2026, 03:13 PM UTC

    The security disclosure announcement explaining that Primer was not affected or impacted by the recently discovered vulnerabilities with PHP and certificate management has now been removed from the Status Page.

Your product runs on more than Primer

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →