Ongoing since 11:47 AM UTC, affecting Teamleader Focus Web App and Invoicecloud and 1 more.
Earlier today we took Teamleader Focus offline as a precaution. The PHP foundation had announced two critical security vulnerabilities in PHP, a technology our platform runs on, and we didn't want to wait for the official fix while exposed. The official fix was released today and we have now installed it across our platform. All services are available again. Our investigation has found no evidence that these vulnerabilities were used against Teamleader. That investigation is still ongoing, and we will update this page if anything changes. Thank you for your patience. If you notice anything unusual, please contact our support team.
Affected components
Update timeline
- monitoring Oct 21, 2026, 11:47 AM UTC
Two critical security vulnerabilities in PHP, a programming language used by a large share of web applications worldwide including Teamleader Focus, were made public on 20 October. Our engineering team immediately rolled out a temporary mitigation across our platform and is monitoring it closely, and we’ll apply PHP’s official patch as soon as it’s released later today. We currently have no indication that customer accounts or data have been affected, and you don’t need to do anything.
- identified Oct 21, 2026, 11:54 AM UTC
Two critical security vulnerabilities in PHP were made public on 20 October. PHP is a programming language used by a large share of web applications worldwide, including Teamleader Focus. As an extra precaution, we’ve temporarily taken Teamleader Focus offline while we apply PHP’s official security patch, and we’ll bring it back online as soon as that’s done. We currently have no indication that customer accounts or data have been affected, and we’ll keep this page updated.
- identified Oct 21, 2026, 11:57 AM UTC
Two critical security vulnerabilities in PHP were made public on 20 October. PHP is a programming language used by a large share of web applications worldwide, including Teamleader Focus. As an extra precaution, we’ve temporarily taken Teamleader Focus offline while we apply PHP’s official security patch, and we’ll bring it back online as soon as that’s done. We currently have no indication that customer accounts or data have been affected, and we’ll keep this page updated.
- identified Oct 21, 2026, 12:00 PM UTC
Two critical security vulnerabilities in PHP were made public on 20 October. PHP is a programming language used by a large share of web applications worldwide, including Teamleader Focus. As an extra precaution, we’ve temporarily taken Teamleader Focus offline while we apply PHP’s official security patch, and we’ll bring it back online as soon as that’s done. We currently have no indication that customer accounts or data have been affected, and we’ll keep this page updated.
- identified Oct 21, 2026, 03:52 PM UTC
A quick update: the official PHP security patch has been released, and our team is applying it right now. Once it’s in place and tested, we’ll bring Teamleader Focus back online. Thanks for bearing with us, we’ll let you know here as soon as Teamleader Focus is available again.
- monitoring Oct 21, 2026, 06:42 PM UTC
Earlier today we took Teamleader Focus offline as a precaution. The PHP foundation had announced two critical security vulnerabilities in PHP, a technology our platform runs on, and we didn't want to wait for the official fix while exposed. The official fix was released today and we have now installed it across our platform. All services are available again. Our investigation has found no evidence that these vulnerabilities were used against Teamleader. That investigation is still ongoing, and we will update this page if anything changes. Thank you for your patience. If you notice anything unusual, please contact our support team.
Your product runs on more than Teamleader
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services