Rise Up incident
Security updates following newly disclosed PHP vulnerabilities
Rise Up experienced a notice incident on October 21, 2026 affecting Web application and Web application and 1 more component, lasting 1h 29m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- identified Oct 21, 2026, 02:23 PM UTC
On October 21, the PHP project disclosed critical security vulnerabilities affecting PHP, a technology used across the industry and within the Rise Up platform. Our infrastructure team was notified in advance and has been actively working on this issue. Preventive protective measures have already been deployed across our environments, and security updates are being rolled out progressively as they become available. We do not expect any service disruption as a result of these updates. We will post an update once the rollout is complete.
- resolved Oct 21, 2026, 03:53 PM UTC
Following the critical PHP security vulnerabilities disclosed on October 21, our infrastructure team has completed the deployment of security updates across the systems serving the Rise Up platform. Protective measures were applied ahead of the official disclosure, and the security fixes were rolled out as soon as they became available, with no service disruption. We continue to monitor our environments closely. No further action is required from our customers.