# Scaleway: P2 - [WEBHOSTING] - PHP Emergency maintenance

- Impact (vendor’s label): maintenance (maintenance)
- Status: identified · edited after publishing
- Started: 2026-10-21 14:38 UTC · Resolved: not resolved · Duration: ongoing
- Updates: 1 · Affected components: Elements - Products - Web Hosting, Web Hosting, Dedibox - Products - Hosting, Hosting
- [Vendor status page: https://stspg.io/6w05z5ks4sz5](https://stspg.io/6w05z5ks4sz5)
- [Company: Scaleway](https://rewindex.com/company/scaleway.md)

## Timeline of updates

- **identified** 2026-10-21 14:38 UTC: The PHP project released today a fix for two critical  vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php\#2026-10-21-5 As a precaution, we have taken Webhosting websites offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.

## Rewindex changes for this incident

- 2026-10-21 15:13 UTC: [Incident silently edited: P2 - \[WEBHOSTING\] - PHP Emergency maintenance](https://rewindex.com/change/rb65ff96ee0ca03.md)


---
Canonical: https://rewindex.com/company/scaleway/incidents/t6t2jbytc4gt · Markdown: https://rewindex.com/company/scaleway/incidents/t6t2jbytc4gt.md · JSON: https://rewindex.com/api/v1/companies/scaleway/incidents/t6t2jbytc4gt · Generated 2026-10-22T00:42:01.103Z