Elastx System Status

Active Incident

Updated a few seconds ago

Critical patch of PHP CVEsSecurity Issue

Incident Status

Security Issue

Components

Virtuozzo PaaS

Locations

STO1 - Stockholm South, STO2 - Stockholm West, STO3 - Stockholm North

October 21, 2026 17:25 CEST
October 21, 2026 15:25 UTC

IDENTIFIED

Two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) allow unauthenticated remote code execution. Fixed PHP versions are out, and we are waiting for our supplier to release updated images so we can patch the platform. There is currently no indication that our platform has been compromised, but stopping your environment is the only way to be certain. If you run your own PHP, we strongly recommend upgrading to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 or later. We will post an update by 21:00 CEST at the latest, but hope to have it patched by then.

October 21, 2026 21:11 CEST
October 21, 2026 19:11 UTC

IDENTIFIED

We are still waiting for our supplier to release updated images, so the platform is not yet patched. Next update will be tomorrow at 08:30 CEST.

October 22, 2026 08:35 CEST
October 22, 2026 06:35 UTC

IDENTIFIED

The supplier has issued new images for most of the affected versions. We urge our customers to swiftly update your environment using the available patched images. Remaining images are being worked on.

October 22, 2026 11:10 CEST
October 22, 2026 09:10 UTC

IDENTIFIED

Regarding remaining patches the latest information we have from supplier is: LiteSpeed: Targeting publication by EOD today (EEST, UTC+3). Database templates: Estimated 1-2 days due to longer testing cycles. Unfortunately we do not get live updates regarding these patches and urge customers to keep an eye out for patched images, as they might arrive before we get the possibility to share information about their availability.

October 22, 2026 22:26 CEST
October 22, 2026 20:26 UTC

IDENTIFIED

We now have information that MySQL, LiteSpeed and LLSMP has updated images in the platform. When verifying availability of the announced images we notice that also LEMP seem to have a patched image available. As mentioned we do not get live updates regarding the patches. Customers still waiting for patched images should keep an eye out for them, as they might arrive before we get the possibility to share information about their availability.

October 23, 2026 15:51 CEST
October 23, 2026 13:51 UTC

IDENTIFIED

We now have information that MariaDB and PostgreSQL have patched images in the platform. As earlier informed we do not get live updates regarding the patches. Customers still waiting for patched images should keep an eye out for them, as they might arrive before we get the possibility to share information about their availability.

Scheduled Maintenance

DBaaS management upgradePlanned Maintenance

Schedule

October 26, 2026 09:00 - 16:00 CET
October 26, 2026 08:00 - 15:00 UTC

Components

DBaaS

Locations

STO1 - Stockholm South, STO2 - Stockholm West, STO3 - Stockholm North

Description

We will be upgrading our database management system. During the maintenance window, you might see intermittent unavailability and your datastores may appear as 'Unreachable' in the user interface. This is purely a visual issue, and connections to your databases will not be affected. There will be no impact on customer datastores.

Kubernetes Orchestration UpgradePlanned Maintenance

Schedule

November 2, 2026 10:00 - 14:00 CET
November 2, 2026 09:00 - 13:00 UTC

Components

Kubernetes

Locations

STO1 - Stockholm South, STO2 - Stockholm West, STO3 - Stockholm North

Description

We will upgrade our internal orchestration engine with new functionality. No impact to existing functionality nor customer clusters are expected.

Active Incidents

Active Maintenances

Upcoming Maintenances

Kubernetes