Changes Akamai Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

Akamai: Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

Incident updateNormal progress (rule, 100%)Changed 2026-10-23 20:23 UTCstspg.io

Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

~~Struck in red~~ is what Akamai removed; blue is what they added. Muted text is unchanged context.

ChangedStatus#1

~~identified~~

resolved

AddedResolved time#2

not present

2026-10-23 20:18 UTC

AddedUpdateresolved2026-10-23 20:18 UTC#3

not present

We can confirm that remediation efforts for the reported vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were completed as of 20:06 UTC on October 23, 2026.We have found no evidence that these vulnerabilities impacted Akamai products, API calls, or Control Center. Customers and partners can view additional details by logging in to Control Center or contacting Akamai Support.We apologize for any concern this advisory may have caused and thank you for your patience and continued support. We remain committed to improving our systems and reducing the risk of similar issues in the future.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 22
Before captured 18:24 UTC
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on Oct 23, 11:49 UTC. Record hash 1ee7f0e122893a4a…
Download proof
Oct 23
After captured 20:23 UTC
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on Oct 24, 00:41 UTC. Record hash 2513c9df9f946672…
Download proof

History of this incident

Thursday, October 29

1 incident change

Normal progress
03:53Incident
Incident updateCustomer Security Advisory: PHP Remote Code Execution Vulnerabilities

Friday, October 23

1 incident change

Normal progress
20:23Incident
Incident updateCustomer Security Advisory: PHP Remote Code Execution Vulnerabilitiesthis change

Thursday, October 22

2 incident changes

Normal progress
18:24Incident
Incident updateCustomer Security Advisory: PHP Remote Code Execution Vulnerabilities
Normal progress
01:53Incident
Incident updateCustomer Security Advisory: PHP Remote Code Execution Vulnerabilities

Cite this

Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities on Akamai’s status page, changed 2026-10-23 20:23 UTC (change 3 of 4).

Title: Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
Vendor: Akamai
Date: 2026-10-23 20:23 UTC
URL: https://rewindex.com/change/r91bf783746de87

All Akamai changes Akamai profile Markdown JSON