rewindex

CompaniesLinode (Akamai)Incidents

Linode (Akamai): Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

No impact listedStatus: identifiededitedStarted Not resolved2 updatesstspg.io (opens in new tab)

Timeline of updates

  1. investigatingEdited

    Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, some Quick Deploy Apps, speed test pages, and parts of the website may be unavailable.

    If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available.

    We will provide updates as additional information becomes available.

  2. identifiedEdited

    Updated Guidance after assessment:
    Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, our Cloud Infrastructure Speed Tests will be unavailable.

    If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available.

    We will provide updates as additional information becomes available.

Changes Rewindex caught on this incident

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.

How the archive is checked, and what it cannot prove.

Rewindex captured this after the last checkpoint; the next run () commits it.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).

Linode (Akamai) profileRecent Linode (Akamai) incidentsMarkdownJSON