No impact incident

Chameleon: Chameleon response to PHP CVE-2026-109618 and CVE-2026-109619

Oct 23, 2026, 13:02 UTC

started

17:30 UTC

resolved October 22, 2026

—

duration

Current status of Chameleon: Operational — live Chameleon status

Timeline

Oct 22, 2026, 17:30 UTC
resolved
Chameleon does not use PHP in our stack that supports Chameleon customers and end-users. Chameleon does use PHP in conjunction with Statamic CMS for our marketing site and we have upgraded to the patched PHP version 8.2.35 as of 2026-10-22T17:35:00 UTC.

Updates as published by Chameleon (original).

Berklee IT Services 14:01 UTC · Partial Outage: Colleague
WiscNet 13:57 UTC · [2307805] Wiscnet - r-sheboygansd - Down
CallRail 13:51 UTC · Incident at Unbounce affecting operability to the integration.
Grafana Cloud 13:33 UTC · Some Grafana Instances Experiencing Issues Coming Online after Restart
Twilio 13:24 UTC · SMS Delivery Delays from a Subset of Twilio Short Codes and Long Codes to Appalachian Wireless United States
LiveIntent 13:24 UTC · Custom Reports Unavailable
Mercado Pago 13:19 UTC · ALL SITES - Delay in IPN Payments notifications
Kinsta 13:19 UTC · Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026)
WiscNet 13:19 UTC · [2307287] Walworth J1 School District - 400650 - Down
Twilio 13:13 UTC · SMS Delivery Delays from a Subset of Twilio Short Codes to Liberty Mobile Puerto Rico
NeoProtect 13:06 UTC · Game Shield: Network instability for parts of Frankfurt Location
Lightspeed Systems 12:56 UTC · INCIDENT #16137**Lightspeed Classroom** Classes not loading for OneRoster organizations.
Worldpay 12:50 UTC · INC0702499 - We are investigating issues with Authorization & Payments
Wolt 12:37 UTC · Support tooling issue
Twilio 12:29 UTC · SMS Delivery Receipt Delays from Twilio to Multiple Networks in United States and Canada