GlobalOutageMap
← Live dashboard
Blacknight

Emergency patching for critical PHP security vulnerability.

Incident still open, awaiting updatemaintenanceOfficial source confirmedFirst recorded update Oct 21, 2026, 08:18 AM

We have been rolling out an emergency workaround to a critical security vulnerability (php2shell) released overnight, which impacts any servers running php (all versions) For more information lookup CVE-2026-109618 and CVE-2026-109619. The mitigation we are rolling out is only a temporary workaround until vendors release the security patches (expected later today), and it may impact file uploads. …

Blacknight live status →

This incident was reported earlier. Its current impact is not confirmed by a recent official check.

Last official update:
Oct 21, 2026, 08:18 AM

Are you affected by this incident?

One tap, no account. Your report helps others see if the problem is just them.

Choose your status. You can add a comment next.

No visitor reports in the last 24 hours yet.

Updates (1)

  1. Oct 21, 2026, 08:18 AM
    Emergency patching for critical PHP security vulnerability.

    Update Thursday 22nd 10:30 All Blacknight control panels, shared hosting servers, and managed dedicated and VPS customers are now fully patched. Please also be aware that some versions of PHP on our shared hosting plans are updated using backporting, so the specific php version will not change but the security patches are installed.   We […]

    Blacknight ↗

What to do right now

  • Check the provider's own status page. Open Blacknight's official status page ↗
  • Don't restart everything. If the outage is upstream (cloud provider, CDN, auth provider), redeploying your own service usually won't help and may make recovery slower.
  • Communicate early. Even a one-line update to your users referencing the upstream incident reduces support load dramatically.
  • Watch this page. We post each new vendor update and source as it lands. Bookmark or share the URL with your team.

GlobalOutageMap aggregates publicly reported signals. We never claim authoritative status, always cross-check the provider's official channel before making business decisions.