Voicenotes incident

PHP Vulnerability WAF impact

Resolved on October 21, 2026, affecting section-270170 (Voicenotes) and section-270170 (Voicenotes API).

resolved Oct 21, 2026, 06:00 PM UTC

We increased security protections in response to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. The additional WAF restrictions briefly affected authentication and some editing/API functionality due to false-positive security rules. The affected rules have been adjusted and functionality is restored. PHP security patches have been deployed across our servers, with additional mitigations retained for the related CVE-2026-115560 advisory.

Started
Oct 21, 2026, 06:00 PM UTC
Resolved
Oct 21, 2026, 06:00 PM UTC
Duration
–
Detected by Pingoru
Oct 21, 2026, 06:00 PM UTC

Affected components

section-270170 (Voicenotes)section-270170 (Voicenotes API)

Update timeline

  1. resolved Oct 21, 2026, 06:00 PM UTC

    We increased security protections in response to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. The additional WAF restrictions briefly affected authentication and some editing/API functionality due to false-positive security rules. The affected rules have been adjusted and functionality is restored. PHP security patches have been deployed across our servers, with additional mitigations retained for the related CVE-2026-115560 advisory.

Your product runs on more than Voicenotes

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →