rewindex

CompaniesScalewayIncidents

Scaleway: [BookMyName][Security] Emergency maintenance - BMN services unavailable

CriticalStatus: identifiededitedStarted Not resolved2 updatesstspg.io (opens in new tab)

Affected components: BookMyNameMiscellaneous - BookMyName

Timeline of updates

  1. investigating

    Started: 21 Oct 2026, 15:50 CEST
    Status: Emergency maintenance in progress
    Impact: All BMN services are unavailable.

    The PHP project released today a fix for two critical  vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5 (opens in new tab)

    As a precaution, we have taken BMN services offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.

  2. identified

    Update at 18:40 CEST
    The BookMyName website, its webmail, and the RDAP services are back up.
    The redirection service is still down: it requires further investigation before it can be patched and restored.

Changes Rewindex caught on this incident

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.

How the archive is checked, and what it cannot prove.

Rewindex captured this after the last checkpoint; the next run () commits it.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).

Scaleway profileRecent Scaleway incidentsMarkdownJSON