No impact incident

Intellistack: Security Update: PHP

Affected: Main Application, Website & Management Portal, Other, FS ID - Login Auth and Admin Panel

Current status of Intellistack: Operational — live Intellistack status

Timeline

1. Oct 21, 2026, 15:49 UTC
   identified
   We're aware of the critical PHP vulnerabilities disclosed by the PHP project on October 21, 2026. Like much of the web, some of our services use PHP, and our Engineering and Security teams began working on this as soon as the advisory was announced. Here's where things stand: - We're preparing to apply the security updates and have put additional protective measures in place in the meantime. - We're actively monitoring our environment, and to date we haven't identified any evidence that these vulnerabilities have been exploited or that customer data has been accessed. - No action is required on your part. - We don't expect service disruption. If any maintenance is needed, we'll post it here in advance. We'll share our next update here as things progress. Subscribe to this page to get updates as they're posted.
2. Oct 21, 2026, 18:43 UTC
   identified
   Streamline: Update - October 21, 2026, 2:23 PM ET We've completed applying the PHP security updates to Intellistack Streamline as of 2:23 PM ET. Work on the other affected services is underway, and we'll post an update here as each is completed. Our Engineering and Security teams are continuing to monitor our environment closely. To date, we haven't identified any evidence that these vulnerabilities were exploited or that customer data was accessed. No action is required on your part.
3. Oct 21, 2026, 23:28 UTC
   identified
   Formstack Forms: Update - October 21, 2026, 7:15 PM ET We've completed security updates for Formstack Forms across both our US and AU environments. The updates were applied and validated as of 7:15 PM ET on October 21. Streamline and the Formsite public website were updated earlier today, and work on Formstack Documents and Formstack Admin is underway. Our monitoring still shows no evidence that these vulnerabilities were exploited or that customer data was accessed. No action is required on your part. We'll post our next update as each remaining service is completed. Subscribe to this page to get notified as updates go out.
4. Oct 22, 2026, 00:31 UTC
   identified
   Update - October 21, 2026, 7:55 PM ET We've completed applying the PHP security updates to Formstack Admin console (account sign-in and management) as of 7:55 PM ET. Here's where things stand: Formsite: The Formsite application doesn't use PHP and wasn't affected. Our public formsite.com website was updated as of 12:47 PM ET. Streamline: Updated as of 2:23 PM ET Formstack Forms: Updated as of 7:15 PM ET Formstack Admin: Updated as of 7:55 PM ET Formstack Documents: Updates are being validated and will be rolled out next. Our Engineering and Security teams are continuing to monitor our environment closely. To date, we haven't identified any evidence that these vulnerabilities were exploited or that customer data was accessed. No action is required on your part. We'll post another update here as each remaining service is completed.
5. Oct 22, 2026, 03:01 UTC
   resolved
   Update - October 21, 2026, 10:51 PM ET We've completed applying the PHP security updates to Formstack Documents as of 10:51 PM ET. With this update, security updates are now complete across all affected services. Here's the final status: Formsite: The Formsite application doesn't use PHP and wasn't affected. Our public formsite.com website was updated as of 12:47 PM ET. Streamline: Updated as of 2:23 PM ET Formstack Forms: Updated and validated in both our US and Australia regions as of 7:15 PM ET Formstack Admin console (account sign-in and management): Updated as of 7:55 PM ET Formstack Documents: Updated and verified as of 10:51 PM ET All times above are October 21, 2026. Our Engineering and Security teams will continue to monitor our environment. To date, we haven't identified any evidence that these vulnerabilities were exploited or that customer data was accessed. No action is required on your part; there's nothing to install, patch, or configure on your end. We will complete our post-update monitoring and will post any additional updates here if warranted.

Updates as published by Intellistack (original).