Update - The PHP security updates are still ongoing.

Thank you for your patience.

Oct 21, 2026 - 16:40 UTC
Update - We've already been deploying the updated PHP versions for some time, due to large amount of update targets full update will take some time.
Oct 21, 2026 - 14:23 UTC
Update - We are still working on the issue, initial mitigations in place for all customers. We expect upstream to provide patches at 17:00 (UTC+3).

We've also received some questions about temporarily closing sites. Per customer request we can take site down temporarily, contact our customer service if interested (help@seravo.com).


More on the topic:

- Traficom: Kriittisiä haavoittuvuuksia PHP:ssa https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-37 (in Finnish)
- YLE: Laajasti käytetyssä PHP-ohjelmointi­kielessä haavoittuvuuksia https://yle.fi/a/74-20252496 (in Finnish)

Oct 21, 2026 - 11:01 UTC
Update - We're continuing in improving the mitigations and monitoring the situation. As far as we know, no current mitigation provides full protection.

*Seravo will apply patches as soon as updated PHP versions will become publicly available.*

Oct 21, 2026 - 09:18 UTC
Update - As quick update:

- initial mitigations have been applied to all customers, we keep monitoring the situation to apply any additional modifications if needed
- we might need to temporarily restrict access to some features, we will notify about such changes separately
- all PHP versions are affected
- Seravo currently recommends PHP 8.3 or newer, please see https://help.seravo.com/en/articles/409537-available-php-versions for more details
- upstream will provide patches at today 14:00 UTC+0, and we will start rolling out fixes as soon as update is available
- upstream will provide patches for PHP 8.2 and newer versions at least initially

Oct 21, 2026 - 08:22 UTC
Update - Initial mitigations have been applied to the sites. We continue to monitor the situation and apply further mitigations if needed.

Security patches will be applied as soon as they're available.

Oct 21, 2026 - 08:19 UTC
Identified - We're aware of critical PHP vulnerabilities announced at 2026-10-20. We're mitigating current known exploits, and work actively to apply security patches as soon as they are made available.
Oct 21, 2026 - 07:35 UTC
Finland Operational
fi-coltrane cluster Operational
fi-ellington cluster Operational
fi-haarla cluster Operational
fi-metheny cluster Operational
fi-perko cluster Operational
fi-rantala cluster Operational
fi-sestak cluster Operational
fi-tolonen cluster Operational
fi-lahti cluster Operational
fi-fredriksson cluster Operational
Sweden Operational
se-broo cluster Operational
se-abba cluster Operational
Germany Operational
de-dauner cluster Operational
United States Operational
us-davis cluster Operational
WordPress E-Mail Delivery via SendGrid Operational
Customer Support E-Mail Delivery via Intercom Operational
External Services Operational
Intercom Chats and Posts Operational
seravo.com Operational
Customer Support Phone Line Operational
Service Management Operational
Seravo Customer Portal Operational
Seravo API Operational
Seravo ID Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

Oct 21, 2026

Unresolved incident: Critical PHP vulnerabilities.

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Oct 12, 2026

No incidents reported.

Oct 11, 2026

No incidents reported.

Oct 10, 2026

No incidents reported.

Oct 9, 2026

No incidents reported.

Oct 8, 2026

No incidents reported.

Oct 7, 2026

No incidents reported.