Knak incident

Knak PHP security patch

Minor Resolved View vendor source →

Knak experienced a minor incident on October 21, 2026 affecting Knak App and Knak Send, lasting 5h 36m. The incident has been resolved; the full update timeline is below.

Started
Oct 21, 2026, 01:28 PM UTC
Resolved
Oct 21, 2026, 07:05 PM UTC
Duration
5h 36m
Detected by Pingoru
Oct 21, 2026, 01:28 PM UTC

Affected components

Knak AppKnak Send

Update timeline

  1. investigating Oct 21, 2026, 01:28 PM UTC

    Our Engineering and Security teams are responding to PHP2SHELL, a recently disclosed vulnerability in widely used web software, including components Knak relies on. We are actively monitoring our systems and applying protective measures. Protecting your data comes first. If we see a threat that needs further action, we may take Knak offline temporarily, possibly with little advance notice. We know any disruption affects your team’s ability to build and launch campaigns. We apologize for the inconvenience and will post updates on our status page as they become available.

  2. investigating Oct 21, 2026, 02:27 PM UTC

    We're actioning a patch

  3. investigating Oct 21, 2026, 02:28 PM UTC

    We're actioning a patch.

  4. investigating Oct 21, 2026, 03:12 PM UTC

    We’ve applied the patch and are currently testing it before bringing Knak back online. Our preliminary investigation has shown no indication that Knak has been compromised. We’ll let you know as soon as Knak is back up.

  5. identified Oct 21, 2026, 03:32 PM UTC

    The issue has been identified and a fix is being implemented.

  6. monitoring Oct 21, 2026, 03:45 PM UTC

    A fix has been implemented and we are monitoring the results.

  7. monitoring Oct 21, 2026, 03:59 PM UTC

    We are continuing to monitor for any further issues.

  8. monitoring Oct 21, 2026, 04:03 PM UTC

    We are continuing to monitor for any further issues.

  9. resolved Oct 21, 2026, 07:05 PM UTC

    This incident has been resolved.