# Akamai: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

- Impact (vendor’s label): none
- Status: investigating · edited after publishing
- Started: 2026-10-21 15:03 UTC · Resolved: not resolved · Duration: ongoing
- Updates: 2 · Affected components: Akamai Customer Community, Customer Service, Documentation and Community - Akamai Customer Community
- [Vendor status page: https://stspg.io/jr5h1wt8jgqq](https://stspg.io/jr5h1wt8jgqq)
- [Company: Akamai](https://rewindex.com/company/akamai.md)

## Timeline of updates

- **investigating** 2026-10-21 15:03 UTC: Akamai is aware of the recently published remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-10961). Our subject matter experts are actively investigating and taking the appropriate measures. We have released security updates to address these CVEs and monitor for exploitation attempts. We are actively monitoring our platform while we perform the mitigation actions. If you have questions or are experiencing an impact due to this issue, please use the Support Center on Akamai Community (https://community.akamai.com/customers/s/support), or Akamai Control Center, to contact Akamai Technical Support. Contact information is available at https://www.akamai.com/us/en/support/.
- **investigating** 2026-10-22 01:44 UTC: We are continuing to assess the reported vulnerabilities (CVE-2026-109618 and CVE-2026-10961) across our systems and applications. Our initial assessment has identified systems and applications that may be affected, and remediation efforts, including patching, are actively underway.At this time, we have found no evidence indicating that these vulnerabilities have impacted our products, API calls, or Control Center. We will continue to review our systems and applications to assess potential exposure and identify any additional remediation requirements.Mitigation efforts are being prioritized based on the assessment of potential risk and impact. We remain focused on addressing identified vulnerabilities and will provide further updates as additional information becomes available. We will provide further updates as we make progress.

## Rewindex changes for this incident

- 2026-10-22 01:53 UTC: [Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities](https://rewindex.com/change/ra3d2d620b9e732.md)


---
Canonical: https://rewindex.com/company/akamai/incidents/3074yp9cpd8h · Markdown: https://rewindex.com/company/akamai/incidents/3074yp9cpd8h.md · JSON: https://rewindex.com/api/v1/companies/akamai/incidents/3074yp9cpd8h · Generated 2026-10-22T04:43:23.126Z