Resolved -
This incident has been resolved.
Oct 29, 16:47 CET
Update -
Update: Platform Status
Hypernode is fully operational again, and all PHP versions have been patched.
We are still working on the remaining updates for Hipex and will provide another update as soon as there is further progress.
Oct 22, 11:56 CEST
Monitoring -
PHP Security Patches Completed
All PHP versions on the Hypernode platform have now been successfully patched for the vulnerabilities CVE-2026-109618 and CVE-2026-109619.
The rollout is complete across all supported and End-of-Life (EOL) PHP versions.
Thank you for your patience and understanding throughout the maintenance. We apologize for any inconvenience caused.
Oct 21, 20:33 CEST
Update -
Update on PHP Security Patches
Most servers running PHP 8.2 through PHP 8.5 have now been successfully updated and are back online. If your website is still in maintenance mode or is not accessible, please let us know so we can investigate.
For the EOL PHP versions, we are still waiting for the required patch packages to become available. As soon as these packages are released, we will proceed with applying the patches and bringing the remaining affected servers back online.
Thank you for your patience and understanding. We will share another update as soon as we have further news.
Oct 21, 18:18 CEST
Update -
Update on PHP Security Patches
We are now bringing Hypernodes running PHP 8.2 through PHP 8.5 out of maintenance mode.
At the same time, we are actively applying the security patches to the EOL PHP versions across the Hypernode platform. These Hypernodes will be brought back online as soon as the patches have been successfully applied.
We will continue monitoring the rollout and keep you updated on further progress.
Thank you for your patience and understanding.
Oct 21, 16:52 CEST
Update -
Update on PHP Security Patches
We are currently rolling out the official PHP security patches across the Hypernode platform.
We expect the first websites to be back online by 16:45 CEST. The rollout will continue across the remaining Hypernodes, and we will bring each site back online as soon as the patches have been successfully applied.
We appreciate your patience and will keep you updated on further progress.
Oct 21, 16:34 CEST
Update -
Update on PHP Security Patches
The official PHP security patches for CVE-2026-109618 and CVE-2026-109619 are now available.
We are currently working on implementing the patches on the Hypernode platform and will start rolling them out across our infrastructure shortly.
Once the patches have been successfully applied to your Hypernode, we will bring it back online as soon as possible.
We will keep you updated on the progress and notify you when the maintenance is completed.
Thank you for your patience and understanding.
Oct 21, 15:45 CEST
Update -
Update on PHP Security Patches
We are still waiting for the official PHP patches to become available.
The expected end of maintenance has been extended to 16:30 CEST. In the meantime, the temporary security measures remain in place on all Hypernodes to mitigate the vulnerabilities. Once the official patches are released, we will apply them as soon as possible and bring any affected Hypernodes back online.
No action is required from your side. We will keep you updated as soon as we have more information.
Oct 21, 15:25 CEST
Update -
Due to a current PHP security vulnerability, Hypernode will perform emergency maintenance today. Starting at 14:30 CEST, your Hypernode will be temporarily taken offline, and a maintenance page will be displayed instead of your website.
The official PHP security patches are scheduled for release at 15:00 CEST (13:00 UTC). Once the patches have been released and successfully applied, and we have verified that the environment is safe, we will bring your Hypernode back online.
We expect the maintenance to last until approximately 15:30 CEST (13:30 UTC). However, if the official patches are delayed or additional time is required to apply them, the maintenance may take longer.
No action is required on your part. We will handle the necessary updates and restore your Hypernode as soon as it is safe to do so.
Please monitor our status page for updates throughout the maintenance:
https://www.hypernode-status.com/
We apologise for the inconvenience and appreciate your understanding as we take the necessary measures to protect your environment.
Oct 21, 13:46 CEST
Identified -
Hypernode is addressing two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, announced on October 21, 2026. Under certain conditions, these vulnerabilities could allow attackers to execute malicious code.
- Platform-wide mitigation: Hypernode has deployed additional PHP configuration settings across all nodes:
- session.upload_progress.enabled = 0
- session.use_strict_mode = 1
- Security patches: Corrected PHP packages will be installed as soon as they become available for the relevant PHP versions.
- Extended support: Customers using older PHP versions with Hypernode PHP Extended Support are also covered.
- Customer impact: No customer action is required. Customers should not revert the temporary PHP settings themselves.
- Potential disruption: PHP restarts may cause brief interruptions, but Hypernode aims to minimise any impact on store availability.
The configuration changes are temporary mitigations and do not replace the official security patches.
Oct 21, 11:39 CEST
