Rabbit incident

Security vulnerability in PHP (CVE-2026-109618 and CVE-2026-109619)

Minor Ongoing View vendor source →

Rabbit is currently experiencing a minor incident affecting Websites (whatsrabbit.com) and Websites (Rabbit website) and 1 more component, which began 9h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 09:27 AM UTC
Resolved
Ongoing
Duration
● 8h 39m
Detected by Pingoru
Oct 21, 2026, 09:27 AM UTC

Affected components

Websites (whatsrabbit.com)Websites (Rabbit website)Rabbit Messenger (Rabbit Messenger)Rabbit Messenger (Plugins)Rabbit Messenger (Incoming WhatsApp messages)Rabbit Messenger (Outgoing WhatsApp messages)

Update timeline

  1. investigating Oct 21, 2026, 09:27 AM UTC

    A security vulnerability has been disclosed in PHP, the underlying technology of our backend. The CVEs concerned are CVE-2026-109618 and CVE-2026-109619. We are following this closely. As soon as a patched PHP version is available, we will update our environments as quickly as possible. We will then post an update here. You do not need to take any action yourself. If you have any questions, please contact our support team.