Snipe-IT incident
PHP vulnerability is being mitigated, and patched
Snipe-IT experienced a minor incident on October 21, 2026 affecting Snipe-IT Hosting servers By Region (ap-northeast-2) and Snipe-IT Hosting servers By Region (ap-northeast-1) and 1 more component, lasting 1h 8m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Oct 21, 2026, 03:58 PM UTC
Two PHP vulnerabilities were announced today. We've already rolled out partial mitigations for them, and are in the process of rolling out another mitigation. And, in parallel, we are trying to fetch the upgraded packages, but the mirror network is under severe load.
- investigating Oct 21, 2026, 03:58 PM UTC
Two PHP vulnerabilities were announced today. We've already rolled out partial mitigation for them, and are in the process of rolling out another mitigation. And, in parallel, we are trying to fetch the upgraded packages, but the mirror network is under severe load.
- resolved Oct 21, 2026, 05:06 PM UTC
The newly-patched versions of PHP have been rolled out to the entire fleet.