Envoke experienced a notice incident on October 21, 2026 affecting Envoke Application, lasting 4h 18m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Oct 21, 2026, 03:04 PM UTC
Two critical security vulnerabilities were recently identified in PHP, a programming language used by Envoke and countless websites and IT systems worldwide. Our team has been monitoring the situation and is taking steps to protect Envoke. We have not detected any attacks on our systems, and no action is needed on your part. Updates will be posted at status.envoke.com
- monitoring Oct 21, 2026, 03:43 PM UTC
The first security issue has been mitigated. The second issue has been partially mitigated and is now subject to close monitoring. We are waiting for another patch, which is currently being developed and expected in the next two hours.
- monitoring Oct 21, 2026, 06:29 PM UTC
The security updates are now available and are currently being tested and installed. In the interim, some functionality restrictions are in place within the app to mitigate the risk of vulnerabilities. We'll post another update as soon as the security update is applied. We anticipate this will be completed within two hours.
- resolved Oct 21, 2026, 07:23 PM UTC
We have installed all security patches for the recently announced PHP vulnerabilities on all Envoke systems.