No impact incident

Rise Up: Security updates following newly disclosed PHP vulnerabilities

Affected: Web application, Web application, Web application, API, API, API

Current status of Rise Up: Operational — live Rise Up status

Timeline

1. Oct 21, 2026, 14:23 UTC
   identified
   On October 21, the PHP project disclosed critical security vulnerabilities affecting PHP, a technology used across the industry and within the Rise Up platform. Our infrastructure team was notified in advance and has been actively working on this issue. Preventive protective measures have already been deployed across our environments, and security updates are being rolled out progressively as they become available. We do not expect any service disruption as a result of these updates. We will post an update once the rollout is complete.
2. Oct 21, 2026, 15:53 UTC
   resolved
   Following the critical PHP security vulnerabilities disclosed on October 21, our infrastructure team has completed the deployment of security updates across the systems serving the Rise Up platform. Protective measures were applied ahead of the official disclosure, and the security fixes were rolled out as soon as they became available, with no service disruption. We continue to monitor our environments closely. No further action is required from our customers.

Updates as published by Rise Up (original).