OutageDB

Critical incident

Scaleway: P2 - [WEBHOSTING] - PHP Emergency maintenance

Oct 21, 2026, 14:38 UTC
started
open
no update since October 22, 2026
—
duration

Affected: Hosting, Web Hosting

Current status of Scaleway: Minor issues — live Scaleway status

Timeline

  1. Oct 21, 2026, 14:38 UTC
    identified
    The PHP project released today a fix for two critical vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5 As a precaution, we have taken Webhosting websites offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.
  2. Oct 22, 2026, 06:20 UTC
    identified
    [Update] Security Maintenance – Web Hosting Services Security patching for the php2shell vulnerability is progressing: cPanel Environments (Resolved): PHP versions have been updated across all Scaleway and Online.net cPanel servers (as well as Scaleway Plesk). Maintenance mode has been lifted, and services are back online. Classic Shared Hosting / Mutu (In Progress): Classic shared environments remain under maintenance while work is actively underway.

Updates as published by Scaleway (original).

Other services with incidents at the same time

This was part of a wider event: 109 services reported incidents within the hour.

More Scaleway incidents