rewindex

ChangesAkamaiCustomer Security Advisory: PHP Remote Code Execution Vulnerabilities

Akamai: Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

Incident updateNormal progress (rule, 100%)Changed stspg.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Akamai removed; blue is what they added. Muted text is unchanged context.

ChangedStatus#1
Before: investigating
After: identified
AddedUpdateidentified#2
Before: not present
After: Update - We are continuing to assess the reported vulnerabilities (CVE-2026-109618 and CVE-2026-109619) across our systems and applications. Our initial assessment has identified systems and applications that may be affected, and remediation efforts, including patching, are actively underway.At this time, we have found no evidence indicating that these vulnerabilities have impacted our products, API calls, or Control Center. We will continue to review our systems and applications to assess potential exposure and identify any additional remediation requirements. Mitigation efforts are being prioritized based on the assessment of potential risk and impact. We remain focused on addressing identified vulnerabilities and will provide further updates as additional information becomes available. We will provide further updates as we make progress.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

Thursday, October 29

1 incident change

Friday, October 23

1 incident change

Thursday, October 22

2 incident changes

Cite this

Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities on Akamai’s status page, changed 2026-10-22 18:24 UTC (change 2 of 4).

Title
Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
Vendor
Akamai
Date
URL
https://rewindex.com/change/ra7634f060638cd

All Akamai changesAkamai profileMarkdownJSON