Aptible Incident History

1. resolvedOct 22 · 00:24 UTC

   We are aware of a security incident involving compromised eMudhra Certificate Authority (CA) certificates that could affect HTTPS security on systems with outdated certificate trust stores.

   The Aptible platform is not directly impacted by this issue. However, as a precaution, we recommend that customers:

   • Update operating systems and web browsers to their latest security-patched versions to ensure certificate trust stores are current.
   • Upgrade to Aptible CLI v1.0.5, which includes additional mitigations for systems whose OS trust stores have not yet been updated: https://www.aptible.com/docs/reference/aptible-cli/overview

   For additional background, see Cloudflare's security advisory: https://blog.cloudflare.com/emudhra-certificate-compromise

Reported by Aptible on their status page.

1. monitoringOct 21 · 13:04 UTC

   Aptible is aware of the vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP applications that can allow for remote code execution under certain conditions.

   Aptible Platform Impact

   Aptible has reviewed all infrastructure components that we manage and has confirmed that all are unaffected by this vulnerability.

   Customer Application Impact:

   Any customer using PHP in their applications is highly encouraged to take action and patch their applications as soon as possible. If you are unable to patch in a timely manner, consider taking your application offline in the interim. Note for the safety of the Aptible platform, we may disable endpoints for applications that show evidence of being exploited by RCE.

   Aptible provides the platform your application runs on. The PHP runtime version your app uses is controlled by your app's configuration. We cannot patch this for you automatically. Update your PHP version and redeploy as soon as the fixed release is available for your branch.

   If you need help with these upgrades, reach out to Aptible support.

   Additional Resources:

   • Official PHP advisory: https://www.php.net/index.php#2026-10-20-1
   • Proof of concept exploit: https://jackalsyn.com/posts/php-up-2026.html
   • CVE-2026-109618, CVE-2026-109619

   We will update this notice as the situation develops.

Reported by Aptible on their status page.

1. MonitoringOct 21 · 13:04 UTC

   Aptible is aware of the vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP applications that can allow for remote code execution under certain conditions.*Aptible Platform Impact*Aptible has reviewed all infrastructure components that we manage and has confirmed that all are unaffected by this vulnerability.*Customer Application Impact:*Any customer using PHP in their applications is highly encouraged to take action and patch their applications as soon as possible. If you are unable to patch in a timely manner, consider taking your application offline in the interim. Note for the safety of the Aptible platform, we may disable endpoints for applications that show evidence of being exploited by RCE.Aptible provides the platform your application runs on. The PHP runtime version your app uses is controlled by your app's configuration. We cannot patch this for you automatically. Update your PHP version and redeploy as soon as the fixed release is available for your branch.If you need help with these upgrades, reach out to Aptible support.*Additional Resources:*- Official PHP advisory: https://www.php.net/index.php#2026-10-20-1- Proof of concept exploit: https://jackalsyn.com/posts/php-up-2026.html- CVE-2026-109618, CVE-2026-109619We will update this notice as the situation develops.

Reported by Aptible on their status page.

1. CompletedOct 21 · 04:09 UTC

   The scheduled maintenance has been completed.

Reported by Aptible on their status page.

1. CompletedOct 15 · 03:17 UTC

   The scheduled maintenance has been completed.

Reported by Aptible on their status page.