Ongoing since 05:13 PM UTC, affecting Cluster EU 1 and Cluster US 1 and 1 more.
Following the PHP security vulnerability announced on October 20 (php2shell), we have taken our OAuth authentication service offline as a precaution while we wait for the patched packages for our infrastructure. Until the service is restored, you can’t add new OAuth-based connections or re-authorize existing ones. Existing connections continue to run normally. This service is separate from the systems that store and process customer data, and we have no indication BlueConic has been targeted. No action is required from customers. We’ll update this page once the patch is applied.
Affected components
Update timeline
- identified Oct 21, 2026, 05:13 PM UTC
Following the PHP security vulnerability announced on October 20 (php2shell), we have taken our OAuth authentication service offline as a precaution while we wait for the patched packages for our infrastructure. Until the service is restored, you can’t add new OAuth-based connections or re-authorize existing ones. Existing connections continue to run normally. This service is separate from the systems that store and process customer data, and we have no indication BlueConic has been targeted. No action is required from customers. We’ll update this page once the patch is applied.
Your product runs on more than BlueConic
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services