Pagely incident
PHP Security advisory: Critical remote code execution vulnerabilities
Resolved after 4 hours 36 minutes, affecting VPS Hosting Infrastructure and Shared Hosting Infrastructure, on October 21, 2026.
Pagely has completed the deployment of PHP security updates across customer servers to address the recently disclosed critical remote code execution vulnerabilities. No further action is required from customers regarding this update. This advisory is now resolved.
Affected components
Update timeline
- investigating Oct 21, 2026, 02:14 PM UTC
You may we aware of the recent critical PHP vulnerabilities (https://www.php.net/archive/2026.php#2026-10-21-5) that have a patch in progress from the PHP team. Pagely is well aware of this matter and will be applying the patched PHP versions to customer servers once it is available. No actions are needed from our customers on this PHP upgrade. Further updates will be posted shortly.
- investigating Oct 21, 2026, 02:21 PM UTC
We are continuing to investigate this issue.
- investigating Oct 21, 2026, 02:34 PM UTC
Overnight, we deployed some mitigations, and we're building updated PHP containers with the full fixes now.
- resolved Oct 21, 2026, 06:51 PM UTC
Pagely has completed the deployment of PHP security updates across customer servers to address the recently disclosed critical remote code execution vulnerabilities. No further action is required from customers regarding this update. This advisory is now resolved.
Your product runs on more than Pagely
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services