PHP Security Vulnerability Assessment (CVE-2026-109618 & CVE-2026-109619)
Update - Patch deployment is progressing well across the affected environments.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

PHP 8.x: 8.0.30-11, 8.0.30-12, 8.0.30-21, 8.1.34-4, 8.1.34-5, 8.1.34-6, 8.2.34-2, 8.2.35, 8.3.35-2, 8.3.36, 8.4.26-2, 8.4.27, 8.5.11-2, and 8.5.12
PHP 7.x: 7.0.33-3, 7.0.33-29, 7.1.33-3, 7.1.33-20, 7.2.34-2, 7.2.34-12, 7.3.31-2, 7.3.33-15, 7.4.33-18, 7.4.33-19, and 7.4.33-31
PHP 5.x: 5.2.17-3, 5.2.17-27, 5.3.24-2, 5.3.29-29, 5.4.14-2, 5.4.45-2, 5.4.45-82, 5.5.38-2, 5.5.38-64, 5.6.40-15, and 5.6.40-25

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.
Oct 26, 2026 - 06:42 EDT
Update - The security patch deployment is progressing well across the affected environments. Our teams are continuing to work toward completing the deployment and ensuring the security of the impacted services.

We will provide further updates as more information becomes available.
Oct 25, 2026 - 08:23 EDT
Update - The Patch deployment is underway across affected environments with good progress.
We will share another update as soon as more information is available.

Thank you for your understanding and patience.
Oct 24, 2026 - 17:54 EDT
Update - Patch deployment continues across the affected hosting environments. Our Security and Engineering teams are monitoring the rollout to ensure successful deployment and maintain service stability.

We will continue to provide updates as progress is made.

Thank you for your patience.
Oct 24, 2026 - 07:37 EDT
Update - Patch deployment is ongoing across our fleet. We appreciate your continued patience.
Oct 23, 2026 - 22:26 EDT
Update - We are continuing to work on a fix for this issue.
Oct 23, 2026 - 13:55 EDT
Update - Our Security and Engineering teams continue to assess the remaining hosting environments and verify the deployment of security updates. The rollout is progressing in stages, with teams monitoring systems to help maintain service stability.
We will continue to monitor progress and share further updates as more information becomes available.
To check the PHP version currently running on your site, please refer to this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

PHP 8.x: 8.0.30-11, 8.0.30-12, 8.0.30-21, 8.1.34-4, 8.1.34-5, 8.1.34-6, 8.2.34-2, 8.2.35, 8.3.35-2, 8.3.36, 8.4.26-2, 8.4.27, 8.5.11-2, and 8.5.12
PHP 7.x: 7.0.33-3, 7.0.33-29, 7.1.33-3, 7.1.33-20, 7.2.34-2, 7.2.34-12, 7.3.31-2, 7.3.33-15, 7.4.33-18, 7.4.33-19, and 7.4.33-31
PHP 5.x: 5.2.17-3, 5.2.17-27, 5.3.24-2, 5.3.29-29, 5.4.14-2, 5.4.45-2, 5.4.45-82, 5.5.38-2, 5.5.38-64, 5.6.40-15, and 5.6.40-25

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.
Oct 23, 2026 - 04:33 EDT
Update - Our Security and Engineering teams are continuing to deploy and verify security updates across our hosting environments. The work is progressing in stages, and teams are monitoring systems throughout the rollout to help maintain service stability.

We are continuing to assess the remaining environments and will share further updates as patching progresses. To check the PHP version currently running on your site, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have concerns, please contact our Support team.
Oct 22, 2026 - 15:28 EDT
Identified - Our Engineering teams are continuing to deploy and verify patched PHP builds across our hosting environments. The rollout is progressing, and teams are checking that the appropriate update is applied for each environment.

The fixed PHP versions identified so far include:

PHP 8.x: 8.0.30-11, 8.0.30-12, 8.0.30-21, 8.1.34-4, 8.1.34-5, 8.1.34-6, 8.2.34-2, 8.2.35, 8.3.35-2, 8.3.36, 8.4.26-2, 8.4.27, 8.5.11-2, and 8.5.12
PHP 7.x: 7.0.33-3, 7.0.33-29, 7.1.33-3, 7.1.33-20, 7.2.34-2, 7.2.34-12, 7.3.31-2, 7.3.33-15, 7.4.33-18, 7.4.33-19, and 7.4.33-31
PHP 5.x: 5.2.17-3, 5.2.17-27, 5.3.24-2, 5.3.29-29, 5.4.14-2, 5.4.45-2, 5.4.45-82, 5.5.38-2, 5.5.38-64, 5.6.40-15, and 5.6.40-25

If you would like to check your sites PHP information, please follow the steps in this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file

Our infrastructure remains under heightened monitoring as the rollout continues. We will share further updates here as work progresses and additional information becomes available.
Oct 22, 2026 - 10:42 EDT
Update - Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

We are currently analyzing the security releases and testing deployment paths in our staging environments to ensure service stability. At this time, no patches or modifications have been rolled out to production systems.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.
Oct 21, 2026 - 12:06 EDT
Investigating - We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution.

Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available.

We are continuing to closely monitor the situation and will provide further updates as additional information becomes available.

If you need assistance or have any concerns, please contact our Support team.
Oct 21, 2026 - 12:06 EDT
Uptime over the past 90 days. View historical uptime.
Support Services Operational
Tickets Operational
Phones Operational
Chats Operational
Help Center Operational
Platform Operations Operational
Web Services Operational
DNS Operational
SSH/FTP Operational
Email Operational
MySQL Operational
InterWorx Control Panel Operational
Cluster / NFS Operational
Platform Updates / Other Operational
Managed Wordpress Operational
Wordpress Core Updates Operational
Wordpress Plugin Updates via Visual Compare Operational
Nexcess Cloud Operational
us-midwest-1 Operational
us-west-1 Operational
uk-south-2 Operational
nl-west-1 Operational
au-south-1 Operational
us-midwest-2 Operational
Cloud Container Services Operational
us-midwest-1 Operational
us-west-1 Operational
uk-south-2 Operational
nl-west-1 Operational
au-south-1 Operational
us-midwest-2 Operational
Nexcess Global DNS Operational
Customer Portal Operational
Safe Harbor Updates Operational
Data Centers & Network Operational
Southfield, MI (MEL) Operational
Dearborn, MI (OTR) Operational
San Jose, CA (SJC) Operational
Miami, FL (MIA) Operational
Surrey, UK (LHR) Operational
West Sussex, UK (LGW) Operational
Amsterdam, NL (AMS) Operational
Sydney, AU (SYD) Operational
Lansing, MI (DC3) Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Oct 27, 2026

No incidents reported today.

Oct 26, 2026

StyleSmuggler Vulnerability – Magento & Adobe Commerce
Resolved - Our Engineering teams have completed the patching process for all affected Magento sites where the available Adobe security patch could be successfully applied.

For sites where the patch could not be applied, individual support cases have been created, and affected customers have been contacted with additional information and recommended next steps.

Our patching efforts related to this incident are now complete. We encourage all customers to remain vigilant and keep their Magento installations up to date with the latest available security patches and supported versions.

Thank you for your cooperation and patience while our teams worked through this security event.

If you have any questions or require assistance, please reach out via chat or support case.
Oct 26, 13:28 EDT
Update - Our technical teams continue to actively work through the remediation process across affected environments.
The patch rollout is progressing in batches, with teams continuing to apply the available Adobe security patch across affected Magento versions.

We are also continuing system scans and validation of patched environments to help ensure affected sites can be safely restored to a known-good state.
We will continue to keep clients informed as meaningful progress is made.

If you need assistance or have any concerns, please contact our Support team.
Sep 10, 04:15 EDT
Update - Our Engineering teams continue to make progress on containment, investigation, and remediation across affected environments.

Adobe has recently released a patch addressing the underlying vulnerability. Our technical teams are actively applying the patch across affected environments in batches. There is no specific priority or ordering for the affected Magento versions; the rollout is progressing batch by batch, with our teams continuing to apply the patch across all affected versions.

At the same time, we will continue deep-system scans and validate the patched environments to ensure safe recovery paths and restore impacted sites to a known-good state.

We will continue to share updates as additional remediation details and progress become available.

If you need assistance or have any concerns, please contact our Support team.
Sep 9, 18:52 EDT
Update - Our technical teams continue to make progress on containment, investigation, and remediation across affected environments.

Adobe has recently released a patch addressing the underlying vulnerability.
Our technical teams are actively reviewing, testing, and deploying the patch while continuing deep-system scans and validating safe recovery paths to restore impacted sites to a known-good state.

We will continue to share updates as new remediation details become available.
Please contact Support if you have any questions or require assistance in the meantime.
Sep 8, 02:25 EDT
Update - Our Security and Engineering teams remain actively engaged in the ongoing containment, investigation, and remediation efforts across affected environments.

Our teams continue to review scanning results, validate findings, and take appropriate remediation actions where potential compromise has been identified. Restoration efforts are also progressing as we work to safely return affected sites to a known-good state.

We understand the importance and urgency of this situation and appreciate your continued patience. We will provide further updates as meaningful progress is made and additional remediation details become available.

If you need assistance or have any concerns, please contact our Support team.
Sep 7, 11:07 EDT
Update - Our Security and Engineering teams continue to work on containment and remediation efforts across affected environments. Deep-system scanning remains active as we work to identify, isolate, and quarantine compromised instances.

Restoration planning is also ongoing, with our technical teams validating safe recovery paths for impacted sites. While a precise time-to-resolution is still being established, restoring full system integrity safely remains our highest priority.

We appreciate your continued patience as this work continues. We will provide another status update as soon as there are meaningful developments or milestones to share.

If you need assistance or have any concerns, please contact our Support team.
Sep 7, 02:22 EDT
Update - Our Security and Engineering teams remain actively engaged and are continuing to investigate the affected environments. Confirmed threats are being quarantined as part of our ongoing containment efforts, while findings are reviewed and validated.

We are also preparing to begin restoration work where necessary. An estimated restoration timeline is not yet available, but we will share additional details as soon as they are confirmed. This remains a high priority, and we will continue to provide updates as progress is made.
Sep 6, 17:53 EDT
Update - Our teams remain actively engaged and are continuing to investigate the Magento vulnerability and its potential impact. Security and Engineering are working closely to validate findings, expand scanning, and provide clear remediation guidance for any confirmed cases.

We understand the importance and urgency of this situation and really appreciate your patience. This remains a high priority for us, and we’re here to support you throughout the process.

We recommend continuing to monitor your environment for unusual activity or unexpected changes. If you notice anything suspicious or believe your site may have been affected, please reach out to Support.

We’ll continue to closely monitor the situation and share further updates as more information becomes available. Thank you for your patience.
Sep 6, 10:29 EDT
Update - Our security teams are actively scanning affected environments for indicators of compromise. Initial scanning has identified potential findings that are currently being reviewed and validated. We are continuing to enhance our scanning capabilities to provide additional visibility into potential compromises.

We are also reviewing affected Magento environments and developing remediation guidance for confirmed cases.

Customers may experience some impact if their storefront or applications rely heavily on GraphQL, including headless/PWA implementations.

We recommend continuing to monitor your environment for unusual activity or unexpected changes and contacting Support if you observe any issues or suspect your site may have been compromised.

Our teams will continue to monitor the situation closely and provide further updates as additional information becomes available.
Sep 6, 05:09 EDT
Update - As part of our ongoing mitigation efforts, we have implemented additional security protections across affected Magento/Adobe Commerce environments. This includes a full block on GraphQL requests to help reduce the risk of unauthorized code execution.

Customers using headless/PWA storefronts or applications that rely heavily on GraphQL may experience some impact from these protections.

At this time, there is no official vendor patch available.

We recommend continuing to monitor your site for unusual activity or unexpected changes and contacting Support if you notice any issues with your storefront or suspect your site may have been compromised. We will provide further updates once an official security patch becomes available.

Our teams are continuing to monitor the affected environments and the effectiveness of these mitigations. We will continue to assess the situation and provide additional updates as new information becomes available.
Sep 5, 20:51 EDT
Identified - We are aware of recent reports regarding a critical, unpatched zero-day vulnerability, commonly referred to as “StyleSmuggler”, affecting Magento and Adobe Commerce.

At this time, our teams are actively reviewing server environments to assess any potential impact. As a precautionary measure, our Security team is implementing the appropriate mitigations while we continue our investigation and monitor for further guidance.
We will provide further updates as more information becomes available.

If you need assistance or have any concerns, please contact our Support team .
Sep 5, 09:50 EDT

Oct 25, 2026

Oct 24, 2026

Oct 23, 2026

Oct 22, 2026

Oct 21, 2026

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage