← Live dashboard

Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

ActiveminorOfficial source confirmedFirst recorded update Oct 21, 2026, 02:44 PM

Updated Guidance after assessment: Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, our Cloud Infrastructure Speed Tests will be unavailable. If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available. We will provide updates as additional information becomes available.

Linode live status →

Are you affected by this incident?

One tap, no account. Your report helps others see if the problem is just them.

Choose your status. You can add a comment next.

No visitor reports in the last 24 hours yet.

Updates (2)

  1. Oct 21, 2026, 05:41 PM
    Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

    Updated Guidance after assessment: Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, our Cloud Infrastructure Speed Tests will be unavailable. If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available. We will provide updates as additional information becomes available.

    Linode ↗
  2. Oct 21, 2026, 02:44 PM
    Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

    Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, some Quick Deploy Apps, speed test pages, and parts of the website may be unavailable. If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available. We will provide updates as additional information becomes available.

    Linode ↗

What to do right now

  • Check the provider's own status page. Open Linode's official status page ↗
  • Don't restart everything. If the outage is upstream (cloud provider, CDN, auth provider), redeploying your own service usually won't help and may make recovery slower.
  • Communicate early. Even a one-line update to your users referencing the upstream incident reduces support load dramatically.
  • Watch this page. We post each new vendor update and source as it lands. Bookmark or share the URL with your team.

GlobalOutageMap aggregates publicly reported signals. We never claim authoritative status, always cross-check the provider's official channel before making business decisions.