Dropsolid incident

Security mitigation for CVE-2026-109618 and CVE-2026-109619

Minor Ongoing View vendor source →

Dropsolid is currently experiencing a minor incident affecting Managed CMS & Drupal Cloud and Marketing Automation, which began 3h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 06:55 AM UTC
Resolved
Ongoing
Duration
● 2h 59m
Detected by Pingoru
Oct 21, 2026, 06:55 AM UTC

Affected components

Managed CMS & Drupal CloudMarketing Automation

Update timeline

  1. investigating Oct 21, 2026, 06:55 AM UTC

    We are aware of CVE-2026-109618 and CVE-2026-109619. So far we see no impact on our platform or customer environments. As a precaution, we are applying mitigation steps throughout the day, which may cause brief service disruptions. We will post an update once mitigation is complete.

  2. investigating Oct 21, 2026, 07:34 AM UTC

    We are continuing to work on the issue.

  3. investigating Oct 21, 2026, 08:03 AM UTC

    We have emailed our customers about these vulnerabilities. This email was sent by Dropsolid and is legitimate. Our teams are actively working on mitigations and are ready to roll out the PHP update as soon as the patches are released (expected around 16h CEST). If you have any doubt about a message from us, contact [email protected] or your Service Delivery Manager or Account Manager.

  4. investigating Oct 21, 2026, 08:03 AM UTC

    We have emailed our customers about these vulnerabilities. This email was sent by Dropsolid and is legitimate. Our teams are actively working on mitigations and are ready to roll out the PHP update as soon as the patches are released. If you have any doubt about a message from us, contact [email protected] or your Service Delivery Manager or Account Manager.

  5. investigating Oct 21, 2026, 09:35 AM UTC

    Within the next 30 minutes we will roll out a mitigation. While we restart some services, you may experience a short service interruption. We will post an update once the rollout is complete.