Skip to content

Incident detail

P2 - [WEBHOSTING] - PHP Emergency maintenance

Active incidentCritical2 affected services

Timeline window

Started

Get alerted the next time Scaleway breaks

Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.

Timeline

Incident updates

Every update on the official status source, oldest to newest, exactly as it appeared there.

  1. Identified

    The PHP project released today a fix for two critical  vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5

    As a precaution, we have taken Webhosting websites offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.

Keep exploring

More from Scaleway

Neighboring incidents on Scaleway's timeline and the rest of their record on OutageDeck.