Outage in BLOX Digital Service
PHP Vulnerabilities - Mitigated and Patched
Resolved Major
October 22, 2026 - Started 21 days ago
- Lasted 6 days
Incident Report
On Tuesday, October 20, the PHP Group disclosed two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Details are in the PHP announcement:
https://www.php.net/archive/2026.php#2026-10-21-5
We moved quickly to protect our customers. At 9:00 PM CDT on Tuesday, we applied mitigations across our BLOX, Rayos, and VMS platforms. We also added monitoring and detection rules to identify attempts to exploit these vulnerabilities.
The PHP Group released official fixes at 9:00 AM CDT on Wednesday, October 21, and our systems team then deployed those fixes to BLOX, Rayos, and VMS.
Based on our review, we have found no evidence of exploitation attempts on our platforms before the mitigations were in place. We will continue to monitor the situation and will share updates if anything changes.
No action is required on your part. If you have questions, please contact our support team.
https://www.php.net/archive/2026.php#2026-10-21-5
We moved quickly to protect our customers. At 9:00 PM CDT on Tuesday, we applied mitigations across our BLOX, Rayos, and VMS platforms. We also added monitoring and detection rules to identify attempts to exploit these vulnerabilities.
The PHP Group released official fixes at 9:00 AM CDT on Wednesday, October 21, and our systems team then deployed those fixes to BLOX, Rayos, and VMS.
Based on our review, we have found no evidence of exploitation attempts on our platforms before the mitigations were in place. We will continue to monitor the situation and will share updates if anything changes.
No action is required on your part. If you have questions, please contact our support team.
Components affected
BLOX Digital Service BLOX CMS BLOX Digital Service BLOX VMS BLOX Digital Service Rayos CMSTrusted by 1,000+ teams
The Status Page Aggregator with Early Outage Detection
Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.
Latest Updates ( sorted recent to last )
21 days ago - at 10/22/2026 03:26PM
On Tuesday, October 20, the PHP Group disclosed two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Details are in the PHP announcement:
https://www.php.net/archive/2026.php#2026-10-21-5
We moved quickly to protect our customers. At 9:00 PM CDT on Tuesday, we applied mitigations across our BLOX, Rayos, and VMS platforms. We also added monitoring and detection rules to identify attempts to exploit these vulnerabilities.
The PHP Group released official fixes at 9:00 AM CDT on Wednesday, October 21, and our systems team then deployed those fixes to BLOX, Rayos, and VMS.
Based on our review, we have found no evidence of exploitation attempts on our platforms before the mitigations were in place. We will continue to monitor the situation and will share updates if anything changes.
No action is required on your part. If you have questions, please contact our support team.
Latest BLOX Digital Service outages
Network interruption in us-east-1 - 23 days ago
BLOX-CMS 1.96.3 release at 11AM central - 23 days ago
BLOX Subscription 1.71.1 release at 3:00 PM Central Time - about 1 month ago
BLOX APPMAN 0.28.1 release at 1:00 PM Central Time - about 2 months ago
BLOX Notifier and incomplete message sends - 2 months ago
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6320 services available
Integrations with
