← Live dashboard

Update on PHP security vulnerability

ResolvedminorOfficial source confirmedSource start Oct 22, 2026, 01:38 AM · Resolved Oct 22, 2026, 03:31 AM

HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.

HubSpot live status →

What visitors reported during this incident

No visitor reports were filed for this incident.

Having problems with HubSpot now? Check the current status

Updates (3)

  1. Oct 22, 2026, 03:31 AM
    Update on PHP security vulnerability

    HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.

    HubSpot ↗
  2. Oct 22, 2026, 02:00 AM
    Update on PHP security vulnerability

    HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.

    HubSpot ↗
  3. Oct 22, 2026, 01:38 AM
    Update on PHP security vulnerability

    HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.

    HubSpot ↗

What to do next

  • Verify your own services recovered cleanly. Some upstream outages leave queues or caches in a degraded state, run smoke tests before declaring green internally.
  • Save the post-mortem. Vendors usually publish a detailed RCA 1-3 days later. We'll add it to this page when it appears.
  • Watch the provider going forward. Follow HubSpot's status feed →

GlobalOutageMap aggregates publicly reported signals. We never claim authoritative status, always cross-check the provider's official channel before making business decisions.