Monitoring - Aptible is aware of the vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP applications that can allow for remote code execution under certain conditions.
*Aptible Platform Impact*
Aptible has reviewed all infrastructure components that we manage and has confirmed that all are unaffected by this vulnerability.
*Customer Application Impact:*
Any customer using PHP in their applications is highly encouraged to take action and patch their applications as soon as possible. If you are unable to patch in a timely manner, consider taking your application offline in the interim. Note for the safety of the Aptible platform, we may disable endpoints for applications that show evidence of being exploited by RCE.
Aptible provides the platform your application runs on. The PHP runtime version your app uses is controlled by your app's configuration. We cannot patch this for you automatically. Update your PHP version and redeploy as soon as the fixed release is available for your branch.
If you need help with these upgrades, reach out to Aptible support.
*Additional Resources:*
- Official PHP advisory: https://www.php.net/index.php#2026-10-20-1
- Proof of concept exploit: https://jackalsyn.com/posts/php-up-2026.html
- CVE-2026-109618, CVE-2026-109619
We will update this notice as the situation develops.
Oct 21, 2026 - 09:04 EDT
*Aptible Platform Impact*
Aptible has reviewed all infrastructure components that we manage and has confirmed that all are unaffected by this vulnerability.
*Customer Application Impact:*
Any customer using PHP in their applications is highly encouraged to take action and patch their applications as soon as possible. If you are unable to patch in a timely manner, consider taking your application offline in the interim. Note for the safety of the Aptible platform, we may disable endpoints for applications that show evidence of being exploited by RCE.
Aptible provides the platform your application runs on. The PHP runtime version your app uses is controlled by your app's configuration. We cannot patch this for you automatically. Update your PHP version and redeploy as soon as the fixed release is available for your branch.
If you need help with these upgrades, reach out to Aptible support.
*Additional Resources:*
- Official PHP advisory: https://www.php.net/index.php#2026-10-20-1
- Proof of concept exploit: https://jackalsyn.com/posts/php-up-2026.html
- CVE-2026-109618, CVE-2026-109619
We will update this notice as the situation develops.
Oct 21, 2026 - 09:04 EDT
api.aptible.com
Operational
auth.aptible.com
Operational
dashboard.aptible.com
Operational
Aptible Deploy
Operational
Let's Encrypt
Operational
AWS EC2
Operational
AWS EC2 (us-east-1 — Virginia)
Operational
AWS EC2 (us-west-2 — Oregon)
Operational
AWS EC2 (us-west-1 — California)
Operational
AWS EC2 (us-east-2 — Ohio)
Operational
AWS EC2 (ca-central-1 — Canada)
Operational
AWS EC2 (sa-east-1 — São Paulo)
Operational
AWS EC2 (eu-central-1 — Frankfurt)
Operational
AWS EC2 (eu-west-1 — Ireland)
Operational
AWS EC2 (eu-west-2 — London)
Operational
AWS EC2 (eu-west-3 — Paris)
Operational
AWS EC2 (ap-south-1 — Mumbai)
Operational
AWS EC2 (ap-southeast-1 — Singapore)
Operational
AWS EC2 (ap-southeast-2 — Sydney)
Operational
AWS EC2 (ap-northeast-2 — Seoul)
Operational
AWS EC2 (ap-northeast-1 — Tokyo)
Operational
Aptible LLM Gateway
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.
Scheduled Maintenance
Scheduled API Maintenance Nov 1, 2026 20:00 - Nov 2, 2026 00:00 EST
Update -
We will be undergoing scheduled maintenance during this time.
Oct 26, 2026 - 18:29 EDT
Oct 26, 2026 - 18:29 EDT
Scheduled -
We will be performing an updates to auth.aptible.com and api.aptible.com between 20:00 and 23:59 ET on Nov 1st.
Operations will be unavailable during this time. Autoscaling will also be disabled. Already running apps and databases will not be impacted.
After the maintenance window, all tokens will be invalidated. This includes long-lived tokens for SCIM and Activity Logs. We will be reaching out to all users with impacted SCIM or Activity Logs tokens to remind them to rotate their tokens.
Oct 26, 2026 - 17:48 EDT
Operations will be unavailable during this time. Autoscaling will also be disabled. Already running apps and databases will not be impacted.
After the maintenance window, all tokens will be invalidated. This includes long-lived tokens for SCIM and Activity Logs. We will be reaching out to all users with impacted SCIM or Activity Logs tokens to remind them to rotate their tokens.
Oct 26, 2026 - 17:48 EDT