# Pingdom: Emergency Changes to the Pingdom Public API

> Pingdom status incident “Emergency Changes to the Pingdom Public API” on 2026-10-20: impact minor (vendor’s label), 1.0 h, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/pingdom/incidents/512230
Last updated: 2026-10-26T03:14:07Z

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2026-10-20 06:30 UTC · Resolved: 2026-10-20 07:30 UTC · Duration: 1.0 h
- Updates: 1
- [Vendor status page: https://status.pingdom.com/notices/vihpguuwzvvtvynd-emergency-changes-to-the-pingdom-public-api](https://status.pingdom.com/notices/vihpguuwzvvtvynd-emergency-changes-to-the-pingdom-public-api)
- [Company: Pingdom](https://rewindex.com/company/pingdom.md)

## CVEs mentioned

- [CVE-2026-109618](https://rewindex.com/cve/CVE-2026-109618.md) RCE via OOM corruption (CVSS 9.8 critical): names this CVE
- [CVE-2026-109619](https://rewindex.com/cve/CVE-2026-109619.md) RCE via stale global state (CVSS 8.1 high): names this CVE

_Only CVEs the incident text names by id, or that the notice says the vendor is not affected by. Not a statement of cause._

## Timeline of updates

- **resolved** 2026-10-22 13:32 UTC: As part of our emergency mitigation for the recently discovered PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), the Pingdom API now requires requests to include a User-Agent header. Please update your integration to include a descriptive value, such as: User-Agent: MyCompany-PingdomIntegration/1.0 (Replace MyCompany with your company name or the name/use of your integration) We apologize that we were unable to communicate this change in advance. Please contact us if you have any questions, issues, or concerns.


---
Canonical: https://rewindex.com/company/pingdom/incidents/512230 · Markdown: https://rewindex.com/company/pingdom/incidents/512230.md · JSON: https://rewindex.com/api/v1/companies/pingdom/incidents/512230 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:14:07.115Z