No impact incident

Amplitude: Notice: Amplitude not impacted by recent PHP vulnerabilities

Oct 22, 2026, 19:25 UTC

started

19:25 UTC

resolved

<1 min

duration

Current status of Amplitude: Operational — live Amplitude status

Timeline

Oct 22, 2026, 19:25 UTC
resolved
Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation. No customer action is required at this time. As this is a developing advisory, any further updates will be communicated appropriately via our Trust Center at https://trust.amplitude.com/updates?tab=updates&update=65d46972-f7ed-4f53-bccf-f86f1d18393e. Please subscribe to our Trust Center for notification on updates as no further updates will be made on our Statuspage here.

Updates as published by Amplitude (original).

Ohio University 20:22 UTC · Panopto Lecture Capture
Top Hat 20:21 UTC · Security Update: Top Hat & Aktiv Unaffected by Recent PHP Vulnerabilities
Sangoma 20:18 UTC · CX audio quality issues - Business Voice/Business Voice Plus
Sangoma 20:18 UTC · Informational - PHP CVE Vulnerability
Akamai 20:17 UTC · Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities
Buffer 20:15 UTC · Degraded Performance
BigCommerce 20:14 UTC · Authorize.net orders coming in with an incomplete transaction ID for payments made using a stored instrument affecting a subset of stores
Linode 20:08 UTC · Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities
Bolt.new 19:57 UTC · Features → Prompting Degraded
GoTo 19:51 UTC · GoTo Connect - Inbound calls failing for customers in Brazil
OpenAI 19:36 UTC · New Ad Accounts failing to provision admins
Deepgram 19:27 UTC · Elevated Latency and Errors for Batch STT
Fly.io 19:26 UTC · Degraded Edge Performance
Zoom 19:16 UTC · Service Degradation Affecting Zoom Meetings Services in the US.
CivicPlus 18:54 UTC · Intermittent Service Disruption - SeeClickFix 311 CRM