Critical incident
Scaleway: Emergency Maintenance - Dedibox Console
Oct 21, 2026, 14:37 UTC
started
07:22 UTC
resolved October 22, 2026
16 h 45 min
duration
Affected: Dedibox, Dedibox Console
Current status of Scaleway: Minor issues — live Scaleway status
Timeline
- Oct 21, 2026, 14:37 UTCinvestigatingEmergency Maintenance in Progress As part of our investigation into the PHP2SHELL vulnerability (CVE), we are placing console.online.net and api.online.net into maintenance mode as a precautionary measure. The entire console is temporarily unavailable. This maintenance affects only the control plane (Dedibox ordering system and management interface). Hosted servers and services are not affected. Your data remains safe. This maintenance is a precautionary measure while we investigate the vulnerability. We will provide an update as soon as the service is restored.
- Oct 21, 2026, 21:35 UTCinvestigatingInvestigation and mitigation of the PHP2Shell vulnerability are still ongoing. Your data and dedibox servers remain safe. You can continue to manage Dedibox servers through the Scaleway Console. We will restore the normal service status once maintenance is complete.
- Oct 22, 2026, 07:22 UTCresolvedThe Dedibox Console and API are now back online and fully operational. The security patches have been successfully applied to mitigate the PHP2Shell vulnerability. Thank you for your patience and understanding.
Updates as published by Scaleway (original).
Other services with incidents at the same time
This was part of a wider event: 109 services reported incidents within the hour.
- Supabase 15:36 UTC · Project lifecycle operations such as project creation, pausing, and restoration, in all regions
- OpenAI 15:34 UTC · Elevated error rates for gpt-5.6-luna API requests
- Asana 15:33 UTC · Asana downtime
- Ellucian Cloud 15:33 UTC · Ellucian Workflow – Service Disruption
- Liquid Web - Services 15:33 UTC · Apache Service Disruptions
- Granicus System 15:31 UTC · Temporary Service Unavailability
- Akamai 15:30 UTC · Web Security Analytics, Reporting and Configuration Deployment Issues
- CC 15:30 UTC · PHP Vulnerability announced - Upload capabilities disabled
- Brivo 15:24 UTC · Degraded Performance -- Brivo Smart Home & Brivo Mobile Key
- Zapier 15:21 UTC · Delayed real-time updates in Zapier Tables
- Sucuri 15:14 UTC · PHP Security Advisory: Critical remote code execution vulnerabilities
- Fasthosts 15:10 UTC · Security maintenance: Short interruptions possible on PHP-based services
- Workable 15:08 UTC · E-signature service disruption
- Twilio 15:07 UTC · Customer's Unable to Create New Requests for Hosting and Porting
- Auvik Networks 15:06 UTC · PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
More Scaleway incidents
- October 26, 2026 Kapsule] - [fr-par] Nodes may fail to spawn due to a missing node image
- October 26, 2026 [Support] Delays in ticket processing
- October 26, 2026 [Generative API's] - Deepseek-v4.1-flash timeouts
- October 26, 2026 [Support] Call Handling Delays
- October 23, 2026 [BookMyName] PHP emergency migration — multiple service regressions
- October 23, 2026 [COCKPIT] - fr-par - SCW logs latency / partial drop in ingestion