Trybe incident

Security patch for PHP vulnerability – no action required

Minor Resolved View vendor source →

Trybe experienced a minor incident on October 21, 2026, lasting 1h 13m. The incident has been resolved; the full update timeline is below.

Started
Oct 21, 2026, 01:51 PM UTC
Resolved
Oct 21, 2026, 03:05 PM UTC
Duration
1h 13m
Detected by Pingoru
Oct 21, 2026, 01:51 PM UTC

Update timeline

  1. identified Oct 21, 2026, 01:51 PM UTC

    Status: Identified Our engineering team was made aware of the PHP CVEs last night and has been in close contact with our infrastructure provider since then. Here is where things stand: • Patch: Our infrastructure provider will apply the security patch automatically as soon as it is released. The release is expected at 3pm UK time today (14:00 UTC). • Interim protection: The Trybe application sits behind Cloudflare. Cloudflare has deployed emergency Web Application Firewall (WAF) rules for this vulnerability, which protect us until the patch is applied. NCSC acknowledgement: https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php

  2. monitoring Oct 21, 2026, 03:00 PM UTC

    Status: Monitoring The security patch for the PHP vulnerability has been released and applied. All Trybe services are now running the patched version of PHP. Before the patch was released, the Trybe application was protected by emergency Web Application Firewall (WAF) rules that Cloudflare deployed for this vulnerability. We’ll keep monitoring and will mark this incident as resolved shortly. You don’t need to do anything.

  3. resolved Oct 21, 2026, 03:05 PM UTC

    Status: Resolved This has now been resolved.