Is Payrexx down?

On 20 and 21 October 2026, two critical vulnerabilities in PHP were disclosed (CVE-2026-109618 / CVE-2026-109619). Many websites and online shops run on PHP, including parts of Payrexx. On 21 October 2026, we applied a protective measure even before the official update was available, and rolled out the fixed PHP version across the entire platform the same evening. Payrexx services ran without interruption. We have found no indication that the vulnerabilities were exploited on our systems. No action is required for your Payrexx account. If you run your own online shop on PHP, e.g. WooCommerce, Magento or Shopware, please ask your hosting provider or web agency to confirm that PHP has been updated.

Since 17:25 CEST, emails sent by the Payrexx platform are not being delivered. This affects payment confirmations, login and two-factor emails, password resets and other notifications. Payments are processed normally. Only the related emails are affected. We have identified the cause and are rolling out a fix that routes emails through an alternative sending domain. We will post an update as soon as email delivery is restored.

We are continuing to investigate this issue.

Email delivery has been restored as of 19:01 CEST. All platform emails, including payment confirmations, login and two-factor emails and password resets, are being delivered again. Emails triggered between 17:25 and 19:01 CEST may not have been delivered. Payments made during this time were processed normally and are visible in your Payrexx account. We have addressed the cause of the issue and are monitoring email delivery closely.

This incident has been resolved. Between 17:25 and 19:01 CEST, our primary email provider was unavailable. During this time, emails were automatically delivered through our backup email provider, so no emails were lost. Payments were not affected. We have taken measures to prevent this from happening again.