PHP Vulnerability (CVE-2026-115560)
Identified - PHP Foundation has announced yet another vulnerability in PHP interpreter, tracked as CVE-2026-115560, see announcement at https://www.php.net/archive/2026.php#2026-10-23-1 .

This vulnerability, unlike the previous one, will need special configuration to be exploited, so any real-world attack against our customers is unlikely using this vulnerability.

Seravo will mitigate and apply patches on behalf of all customers when patch is made available.
Oct 23, 2026 - 11:39 UTC
Uptime over the past 90 days. View historical uptime.
Finland Operational
fi-coltrane cluster Operational
fi-ellington cluster Operational
fi-haarla cluster Operational
fi-metheny cluster Operational
fi-perko cluster Operational
fi-rantala cluster Operational
fi-sestak cluster Operational
fi-tolonen cluster Operational
fi-lahti cluster Operational
fi-fredriksson cluster Operational
Sweden Operational
se-broo cluster Operational
se-abba cluster Operational
Germany Operational
de-dauner cluster Operational
United States Operational
us-davis cluster Operational
WordPress E-Mail Delivery via SendGrid Operational
Customer Support E-Mail Delivery via Intercom Operational
External Services Operational
Intercom Chats and Posts Operational
seravo.com Operational
Customer Support Phone Line Operational
Service Management Operational
Seravo Customer Portal Operational
Seravo API Operational
Seravo ID Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Oct 24, 2026

No incidents reported today.

Oct 23, 2026

Unresolved incident: PHP Vulnerability (CVE-2026-115560).

Oct 22, 2026

Critical PHP vulnerabilities
Resolved - This incident has been resolved.
Oct 22, 05:48 UTC
Monitoring - The PHP update has been applied and we're now monitoring how the situation develops.
Oct 21, 21:34 UTC
Update - The PHP security updates are still ongoing.

Thank you for your patience.
Oct 21, 16:40 UTC
Update - We've already been deploying the updated PHP versions for some time, due to large amount of update targets full update will take some time.
Oct 21, 14:23 UTC
Update - We are still working on the issue, initial mitigations in place for all customers. We expect upstream to provide patches at 17:00 (UTC+3).

We've also received some questions about temporarily closing sites. Per customer request we can take site down temporarily, contact our customer service if interested (help@seravo.com).


More on the topic:

- Traficom: Kriittisiä haavoittuvuuksia PHP:ssa https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-37 (in Finnish)
- YLE: Laajasti käytetyssä PHP-ohjelmointi­kielessä haavoittuvuuksia https://yle.fi/a/74-20252496 (in Finnish)
Oct 21, 11:01 UTC
Update - We're continuing in improving the mitigations and monitoring the situation. As far as we know, no current mitigation provides full protection.

*Seravo will apply patches as soon as updated PHP versions will become publicly available.*
Oct 21, 09:18 UTC
Update - As quick update:

- initial mitigations have been applied to all customers, we keep monitoring the situation to apply any additional modifications if needed
- we might need to temporarily restrict access to some features, we will notify about such changes separately
- all PHP versions are affected
- Seravo currently recommends PHP 8.3 or newer, please see https://help.seravo.com/en/articles/409537-available-php-versions for more details
- upstream will provide patches at today 14:00 UTC+0, and we will start rolling out fixes as soon as update is available
- upstream will provide patches for PHP 8.2 and newer versions at least initially
Oct 21, 08:22 UTC
Update - Initial mitigations have been applied to the sites. We continue to monitor the situation and apply further mitigations if needed.

Security patches will be applied as soon as they're available.
Oct 21, 08:19 UTC
Identified - We're aware of critical PHP vulnerabilities announced at 2026-10-20. We're mitigating current known exploits, and work actively to apply security patches as soon as they are made available.
Oct 21, 07:35 UTC

Oct 21, 2026

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Oct 12, 2026

No incidents reported.

Oct 11, 2026

No incidents reported.

Oct 10, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage