rewindex

ChangesLinode (Akamai)Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

Linode (Akamai): Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

Incident updateNormal progress (rule, 100%)Changed stspg.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Linode (Akamai) removed; blue is what they added. Muted text is unchanged context.

ChangedStatus#1
Before: identified
After: resolved
AddedResolved time#2
Before: not present
After: 2026-10-23 20:37 UTC
AddedUpdateresolved#3
Before: not present
After: Akamai has completed its assessment of the recently published PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) across our platform and infrastructure, and mitigation efforts are complete. Cloud Infrastructure Speed Tests will remain offline in the near term. We plan to bring them back online in the near future. If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available. We appreciate your patience while our teams completed this work.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

Thursday, October 29

1 incident change

Friday, October 23

1 incident change

Thursday, October 22

1 incident change

Wednesday, October 21

2 rewrites, 1 incident change

Cite this

Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities on Linode (Akamai)’s status page, changed 2026-10-23 20:43 UTC (change 5 of 6).

Title
Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
Vendor
Linode (Akamai)
Date
URL
https://rewindex.com/change/rdfb1121a7efdf4

All Linode (Akamai) changesLinode (Akamai) profileMarkdownJSON