Nutshell incident

PHP2Shell Response

Resolved after 3 hours 11 minutes, affecting Nutshell application and Nutshell Marketing outgoing email, on October 21, 2026.

monitoring Oct 21, 2026, 02:14 PM UTC

We are continuing to monitor for any further issues.

Started
Oct 21, 2026, 02:14 PM UTC
Resolved
Oct 21, 2026, 05:25 PM UTC
Duration
3h 11m
Detected by Pingoru
Oct 21, 2026, 02:14 PM UTC

Affected components

Nutshell applicationNutshell Marketing outgoing email

Update timeline

  1. monitoring Oct 21, 2026, 02:14 PM UTC

    Nutshell is aware of the PHP2Shell security vulnerability and we have taken steps to secure any affected servers. A few services were unable to be properly secured without risk of attack, and have been temporarily disabled. We expect these services to be re-enabled later this morning when a patch has been applied. The following services are affected: - Landing pages hosted on custom domains - Email link tracking using custom domains - Scheduler pages hosted on custom domains

  2. monitoring Oct 21, 2026, 02:14 PM UTC

    We are continuing to monitor for any further issues.

  3. resolved Oct 21, 2026, 05:25 PM UTC

    This incident has been resolved.

Your product runs on more than Nutshell

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →