No impact incident

one.com: PHP vulnerability

Current status of one.com: Under maintenance — live one.com status

Timeline

1. Oct 21, 2026, 10:55 UTC
   investigating
   We are aware of two recently discovered security vulnerabilities in PHP, a technology used by many websites. These vulnerabilities could potentially be exploited by attackers, which is why they are being treated as a high priority across the industry. Our technical teams are already preparing to implement the necessary security updates as soon as they become available. We are actively monitoring the situation and will share further updates through here.
2. Oct 21, 2026, 13:42 UTC
   identified
   As we implement countermeasures to prevent malicious activity, some services may be temporarily disrupted. This includes uploads to websites, direct database access and calendar synchronization with third-party email applications. We are sorry for the inconvenience.
3. Oct 21, 2026, 14:41 UTC
   identified
   The PHP security update is available and is currently being rolled out to our systems. Our technical teams are working on the rollout with full dedication. As soon as it is completed, we will inform you via this status page.
4. Oct 21, 2026, 14:52 UTC
   identified
   All currently supported PHP version have now been patched. Thats PHP 8.2, 8.3 8.4 & 8.5 Older version are still being worked on. We will keep you updated when this is done
5. Oct 21, 2026, 16:44 UTC
   monitoring
   Progress is being made, and CalDAV and phpMyAdmin are back online again We are actively monitoring the situation and will share further updates through here.
6. Oct 22, 2026, 05:20 UTC
   resolved
   We have now updated all available PHP versions, and all temporary countermeasures implemented during the event have been rolled back. We consider the incident resolved. However, we will continue to closely monitor the situation to ensure ongoing stability.

Updates as published by one.com (original).