Critical incident
Guardsquare: Preventive measures against (CVE-2026-109618 & CVE-2026-109619)
Oct 21, 2026, 14:06 UTC
started
18:01 UTC
resolved
3 h 55 min
duration
Current status of Guardsquare: Operational — live Guardsquare status
Timeline
- Oct 21, 2026, 14:06 UTCinvestigatingWe have temporarily taken our platform offline to safely deploy critical security patches addressing CVE-2026-109618 and CVE-2026-109619.
- Oct 21, 2026, 18:01 UTCresolvedWe've successfully applied all necessary patches to our infrastructure.
- Oct 23, 2026, 11:58 UTCresolved**Official Security Advisory** Upon learning of the vulnerabilities we immediately identified the external facing services within our infrastructure that were potentially vulnerable to CVE-2026-109618 & CVE-2026-109619. As a precaution, we temporarily took the affected services offline until the official patches were available, applied them immediately, and restored operations under continuous security monitoring. We have completed a full impact analysis across our infrastructure. We found no evidence of compromise or unauthorized access related to these vulnerabilities. There's no customer impact and no action required on your side.
Updates as published by Guardsquare.
Other services with incidents at the same time
This was part of a wider event: 109 services reported incidents within the hour.
- Webland 15:04 UTC · Kritische PHP-Sicherheitslücke (PHP2Shell) – Schutzmassnahmen eingeleitet
- Akamai 15:03 UTC · Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
- Duolingo 14:57 UTC · Duolingo is experiencing increased errors
- Cloud Security 14:56 UTC · [Cisco Umbrella & Cisco Secure Connect] Secure Web Gateway Degradation
- GitHub 14:52 UTC · Delays for Pull Requests and Webhook deliveries
- Akamai 14:52 UTC · NetStorage issues in Los Angeles
- Staffbase 14:52 UTC · [All Systems] [Security Advisory] – Critical PHP vulnerabilities — no customer-facing service impact
- Deputy.com 14:47 UTC · Unable to submit forms throughout platform
- Hudl 14:46 UTC · FastScout Outage
- GoFundMe Pro 14:46 UTC · Errors updating campaigns
- SU ITS 14:44 UTC · WeVideo/PlayPosit Outage
- Linode 14:44 UTC · Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
- Zoom 14:43 UTC · Service Degradation Affecting Zoom Learning Webpage
- SU ITS 14:40 UTC · Orange Tracker - Project Sidebar Loading Degradation
- Scaleway 14:38 UTC · P2 - [WEBHOSTING] - PHP Emergency maintenance
More Guardsquare incidents
- September 1, 2026 Monitoring api intermittently errors or times out
- August 20, 2026 Increased attestation token issuance error rate
- July 27, 2026 Detection reasons on threat type page showing incorrect data
- May 3, 2026 TLS certificate issues
- April 21, 2026 Guardsquare platform services were unavailable
- April 3, 2026 Increased webhook delivery failure rate