# Linode (Akamai): Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

- Impact (vendor’s label): none
- Status: identified · edited after publishing
- Started: 2026-10-21 14:44 UTC · Resolved: not resolved · Duration: ongoing
- Updates: 2
- [Vendor status page: https://stspg.io/5yrzq18zhvjz](https://stspg.io/5yrzq18zhvjz)
- [Company: Linode (Akamai)](https://rewindex.com/company/linode-akamai.md)

## Timeline of updates

- **investigating** 2026-10-21 14:44 UTC _(edited after publishing)_: Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, some Quick Deploy Apps, speed test pages, and parts of the website may be unavailable. If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available. We will provide updates as additional information becomes available.
- **identified** 2026-10-21 17:41 UTC _(edited after publishing)_: Updated Guidance after assessment: Akamai is aware of the recently published (CVE-2026-109618 and CVE-2026-109619) vulnerabilities and our teams are actively investigating its potential impact across our platform and infrastructure. As a part of ongoing mitigation efforts, our Cloud Infrastructure Speed Tests will be unavailable. If you are running a vulnerable version of PHP on a Linode instance, we recommend following guidance from the upstream vendor (PHP) and applying upstream patches as they become available. We will provide updates as additional information becomes available.

## Rewindex changes for this incident

- 2026-10-21 16:13 UTC: [Incident silently edited: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities](https://rewindex.com/change/radaee87e7cef5c.md)
- 2026-10-21 17:43 UTC: [Incident updated: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities](https://rewindex.com/change/r2be01db586a5a7.md)
- 2026-10-21 17:53 UTC: [Incident silently edited: Customer Security Advisory: PHP Remote Code Execution Vulnerabilities](https://rewindex.com/change/r4f35ba58b1e022.md)


---
Canonical: https://rewindex.com/company/linode-akamai/incidents/wq8zlhk736fk · Markdown: https://rewindex.com/company/linode-akamai/incidents/wq8zlhk736fk.md · JSON: https://rewindex.com/api/v1/companies/linode-akamai/incidents/wq8zlhk736fk · Generated 2026-10-22T00:35:04.461Z