No impact incident

Sangoma: Informational - PHP CVE Vulnerability

Oct 22, 2026, 20:18 UTC

started

open

no update since October 22, 2026

—

duration

Current status of Sangoma: Operational — live Sangoma status

Timeline

Oct 22, 2026, 20:18 UTC
monitoring
Sangoma is aware of the PHP CVE published on October 21, which addresses a vulnerability that could allow remote code execution (RCE). As of October 22, Sangoma has reviewed internal and external systems across its extensive product portfolio that utilize PHP and has implemented the necessary upgrades and patches to address the vulnerability. Based on this review and the remediation completed, Sangoma has taken the necessary steps to mitigate the risk of remote code execution on affected systems. If you have any questions or require additional information, please contact your Sangoma account representative or support.

Updates as published by Sangoma (original).

This was part of a wider event: 57 services reported incidents within the hour.

GoDaddy 21:06 UTC · PHP Vulnerability Information
Mitti by SafetyCulture 20:53 UTC · Service outage for some sensors
ecoPortal 20:42 UTC · Homepage outage
Ohio University 20:22 UTC · Panopto Lecture Capture
Top Hat 20:21 UTC · Security Update: Top Hat & Aktiv Unaffected by Recent PHP Vulnerabilities
Akamai 20:17 UTC · Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities
Buffer 20:15 UTC · Degraded Performance
BigCommerce 20:14 UTC · Authorize.net orders coming in with an incomplete transaction ID for payments made using a stored instrument affecting a subset of stores
Linode 20:08 UTC · Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities
Bolt.new 19:57 UTC · Features → Prompting Degraded
GoTo 19:51 UTC · GoTo Connect - Inbound calls failing for customers in Brazil
OpenAI 19:36 UTC · New Ad Accounts failing to provision admins
Deepgram 19:27 UTC · Elevated Latency and Errors for Batch STT
Fly.io 19:26 UTC · Degraded Edge Performance
Amplitude 19:25 UTC · Notice: Amplitude not impacted by recent PHP vulnerabilities