Akeneo experienced a notice incident on October 21, 2026 affecting UI and REST API and 1 more component, lasting 5h 27m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- identified Oct 21, 2026, 11:30 AM UTC
We are aware of two critical PHP vulnerabilities announced yesterday and are treating this as a high-priority security matter. Protecting your business and data is our priority. Our engineering team is actively assessing the potential impact on Akeneo services, and mitigation work is already underway. In parallel, we are closely monitoring the PHP security release and will provide further updates here as our assessment and remediation progress. Your PIM instance is running normally. We will let you know if any action is required on your end. Thank you for your understanding.
- resolved Oct 21, 2026, 04:57 PM UTC
Our mitigation work is complete. PIM SaaS is now running a patched version of PHP, which includes fixes for both identified vulnerabilities. PIM SaaS instances continue to operate normally, and no action is required on your end. Thank you for your understanding.