OutageDB

Minor incident

Lightspeed: Statement on PHP vulnerabilities

Oct 21, 2026, 16:15 UTC
started
13:32 UTC
resolved October 23, 2026
45 h 18 min
duration

Affected: Retail POS, Lightspeed eCom (Europe), Lightspeed eCom (North America & Australia), Back Office, Retail API, Retail POS

Current status of Lightspeed: Operational — live Lightspeed status

Timeline

  1. Oct 21, 2026, 16:15 UTC
    identified
    Lightspeed is aware of the PHP vulnerabilities and is actively addressing it. Our teams have put additional safeguards in place. Some services may be unavailable during this time. We’ll continue to monitor the situation closely and provide further updates as appropriate.
  2. Oct 23, 2026, 13:32 UTC
    resolved
    Lightspeed has completed the deployment of security updates across all products in response to the recently reported PHP vulnerabilities. All services should be available at this time.

Updates as published by Lightspeed (original).

Other services with incidents at the same time

This was part of a wider event: 109 services reported incidents within the hour.

More Lightspeed incidents