Critical PHP vulnerabilities - customer action may be required
Monitoring - Aptible is aware of the vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP applications that can allow for remote code execution under certain conditions.

*Aptible Platform Impact*

Aptible has reviewed all infrastructure components that we manage and has confirmed that all are unaffected by this vulnerability.

*Customer Application Impact:*

Any customer using PHP in their applications is highly encouraged to take action and patch their applications as soon as possible. If you are unable to patch in a timely manner, consider taking your application offline in the interim. Note for the safety of the Aptible platform, we may disable endpoints for applications that show evidence of being exploited by RCE.

Aptible provides the platform your application runs on. The PHP runtime version your app uses is controlled by your app's configuration. We cannot patch this for you automatically. Update your PHP version and redeploy as soon as the fixed release is available for your branch.

If you need help with these upgrades, reach out to Aptible support.

*Additional Resources:*

- Official PHP advisory: https://www.php.net/index.php#2026-10-20-1
- Proof of concept exploit: https://jackalsyn.com/posts/php-up-2026.html
- CVE-2026-109618, CVE-2026-109619

We will update this notice as the situation develops.
Oct 21, 2026 - 09:04 EDT
Uptime over the past 90 days. View historical uptime.
api.aptible.com Operational
auth.aptible.com Operational
dashboard.aptible.com Operational
Aptible Deploy Operational
Let's Encrypt Operational
AWS EC2 Operational
AWS EC2 (us-east-1 — Virginia) Operational
AWS EC2 (us-west-2 — Oregon) Operational
AWS EC2 (us-west-1 — California) Operational
AWS EC2 (us-east-2 — Ohio) Operational
AWS EC2 (ca-central-1 — Canada) Operational
AWS EC2 (sa-east-1 — São Paulo) Operational
AWS EC2 (eu-central-1 — Frankfurt) Operational
AWS EC2 (eu-west-1 — Ireland) Operational
AWS EC2 (eu-west-2 — London) Operational
AWS EC2 (eu-west-3 — Paris) Operational
AWS EC2 (ap-south-1 — Mumbai) Operational
AWS EC2 (ap-southeast-1 — Singapore) Operational
AWS EC2 (ap-southeast-2 — Sydney) Operational
AWS EC2 (ap-northeast-2 — Seoul) Operational
AWS EC2 (ap-northeast-1 — Tokyo) Operational
Aptible LLM Gateway Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Scheduled Maintenance

Dedicated Stack maintenance Nov 4, 2026 20:00 - Nov 5, 2026 00:00 EST

Aptible will be performing maintenance to dedicated stacks on November 4, 2026 between 8:00 PM EDT and 11:59 PM EDT

During this window, several systems, including any NAT instances or VPNs in your stack, will receive several security patches. This maintenance is expected to have following impacts:
* Outbound connections originating from your stack may fail for a brief period, likely no longer than 5 minutes. This does **not** impact inbound connections coming through an Endpoint.
* VPNs may be unavailable for a brief period, likely no longer than 5 minutes.
* A small number of operations may be blocked or fail unexpected.
* Any running database tunnels or ephemeral sessions will be disconnected.
* Logs streamed via the aptible logs CLI command will be disconnected. You will be able to immediately reconnect to streaming logs if you are impacted.
Posted on Nov 03, 2026 - 15:26 EST

Nov 4, 2026

No incidents reported today.

Nov 3, 2026

No incidents reported.

Nov 2, 2026

No incidents reported.

Nov 1, 2026

Scheduled API Maintenance
Completed - The scheduled maintenance has been completed.
Nov 1, 21:50 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 1, 20:00 EST
Update - We will be undergoing scheduled maintenance during this time.
Oct 26, 18:29 EDT
Scheduled - We will be performing an updates to auth.aptible.com and api.aptible.com between 20:00 and 23:59 ET on Nov 1st.

Operations will be unavailable during this time. Autoscaling will also be disabled. Already running apps and databases will not be impacted.

After the maintenance window, all tokens will be invalidated. This includes long-lived tokens for SCIM and Activity Logs. We will be reaching out to all users with impacted SCIM or Activity Logs tokens to remind them to rotate their tokens.
Oct 26, 17:48 EDT

Oct 31, 2026

No incidents reported.

Oct 30, 2026

Shared stack maintenance
Completed - The scheduled maintenance has been completed.
Oct 30, 23:23 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 30, 19:23 EDT
Scheduled - Our team will be performing an upgrade of database hosts on shared stacks. Impacted databases will need to be restarted as part of this maintenance. Shared stack app hosts already upgraded earlier today.

Dedicated stacks are not impacted at this time.
Oct 30, 19:22 EDT

Oct 29, 2026

No incidents reported.

Oct 28, 2026

No incidents reported.

Oct 27, 2026

No incidents reported.

Oct 26, 2026

No incidents reported.

Oct 25, 2026

No incidents reported.

Oct 24, 2026

No incidents reported.

Oct 23, 2026

Git server maintenance
Completed - The scheduled maintenance has been completed.
Oct 23, 17:20 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 23, 17:00 EDT
Scheduled - During this period we will be performing maintenance on our Git server (git.aptible.com and beta.aptible.com), which is used for Dockerfile based (`git push`) deployments.

The server may be unavailable for deploying new code for a short period (2-5 minutes) during this window, and some deployments happening during this window which are being streamed via the CLI may see the deployment logs disconnected from the CLI. However, those deployment operations already running will keep running normally, and their result can be verified in the Aptible Dashboard (https://app.aptible.com/)

No other impact to running services or the Aptible platform is expected.
Oct 23, 14:18 EDT

Oct 22, 2026

No incidents reported.

Oct 21, 2026

Security Advisory: eMudhra Certificate Compromise - No Aptible Platform Impact
Resolved - We are aware of a security incident involving compromised eMudhra Certificate Authority (CA) certificates that could affect HTTPS security on systems with outdated certificate trust stores.

The Aptible platform is not directly impacted by this issue. However, as a precaution, we recommend that customers:

- Update operating systems and web browsers to their latest security-patched versions to ensure certificate trust stores are current.
- Upgrade to Aptible CLI v1.0.5, which includes additional mitigations for systems whose OS trust stores have not yet been updated: https://www.aptible.com/docs/reference/aptible-cli/overview

For additional background, see Cloudflare's security advisory:
https://blog.cloudflare.com/emudhra-certificate-compromise
Oct 21, 20:24 EDT
Shared stack maintenance
Completed - The scheduled maintenance has been completed.
Oct 21, 00:09 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 20, 21:00 EDT
Scheduled - Our team will be performing an upgrade of app and database hosts on shared stacks. Impacted apps and databases will need to be restarted as part of this maintenance. Apps will be released using our zero downtime release process. Databases will experience up to 3 minutes of downtime during this restart.

Dedicated stacks will not be impacted at this time.
Oct 20, 12:53 EDT
Incident History Powered by Atlassian Statuspage