Provider
AmplitudeIncident detail
Notice: Amplitude not impacted by recent PHP vulnerabilities
Resolved incidentMinor
Timeline window
to
Get alerted the next time Amplitude breaks
Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.
Timeline
Incident updates
Every update on the official status source, oldest to newest, exactly as it appeared there.
Resolved
Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation.
No customer action is required at this time.
As this is a developing advisory, any further updates will be communicated appropriately via our Trust Center at https://trust.amplitude.com/updates?tab=updates&update=65d46972-f7ed-4f53-bccf-f86f1d18393e.
Please subscribe to our Trust Center for notification on updates as no further updates will be made on our Statuspage here.
Keep exploring
More from Amplitude
Neighboring incidents on Amplitude's timeline and the rest of their record on OutageDeck.