SIP US incident
SIP.US Security Advisory: PHP2SHELL Vulnerability
SIP US experienced a critical incident on October 21, 2026 affecting Management Portal, lasting 4h 59m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- monitoring Oct 21, 2026, 01:01 PM UTC
We are actively responding to PHP2SHELL, a security vulnerability affecting widely used web software. Our Engineering and Security teams are closely monitoring our systems and taking appropriate measures to address and mitigate any potential risk. At this time, we do not expect inbound or outbound calling traffic to be affected, and normal call processing should continue without interruption. The security and integrity of our systems and customer information remain our highest priority. If we identify a threat requiring additional protective measures, certain systems or services may be temporarily restricted or taken offline, potentially with limited advance notice. We understand how important reliable voice communications are to your business. Our teams will continue to closely monitor the situation and will provide additional updates if there are any changes that could impact SIP.US services.
- resolved Oct 21, 2026, 06:01 PM UTC
The PHP2SHELL security patch has been successfully applied, and both the SIP.US customer portal is back online and fully accessible.