Sikkerhedssårbarheder i PHP (CVE- 2026- 109618 og CVE- 2026- 109619)
- monitoring
Vi er klar over to sikkerhedssårbarheder i PHP, programmeringssproget Deskpro er bygget på: CVE- 2026- 109618 og CVE- 2026- 109619. PHP har planlagt en sikkerhedsfrigivelse for 14: 00 UTC (15: 00 BST) i dag, 21 Oktober, som forventes at fastsætte dem. - Vi er klar til at anvende PHP "s fix til Deskpro Cloud, så snart det er udgivet. - Hvis du er vært for Deskpro selv, vil vi dele vejledning om opdatering, når PHP rettelse er tilgængelig. Hvis du har spørgsmål, bedes du kontakte vores support team.
- monitoring
Yderligere web ansøgning firewall regler er nu aktive på Deskpro Cloud. Vores netværksleverandør har frigivet dem som svar på disse rapporter, og vi bekræfter, at de fungerer som forventet. PHP sikkerhed udgivelse er stadig planlagt til 14: 00 UTC (15: 00 BST) i dag. Når det er ude, vil vi bygge, teste og rulle ud en opdateret Deskpro Cloud udgivelse. Dette vil tage flere timer, og vi vil skrive her, når udrulningen starter. Hvis du er vært for Deskpro selv (DPC), vil vi dele vejledning, når PHP 's fix er tilgængelig.
- monitoring
Deskpro Cloud tages midlertidigt offline som en sikkerhedsforanstaltning, i overensstemmelse med vejledning fra UK National Cyber Security Centre (NCSC). http: / / www.ncsc.gov.uk / news / crical- security- issue- relating- php
- monitoring
Korrektion: PHP har udgivet rettelser for de to kritiske sårbarheder, CVE- 2026- 109618 og CVE- 2026- 109619. Deres sikkerhedsrådgivning er her: https: / / www.php.net / archive / 2026.php # 2026-10-21-5 Vi venter på de officielle PHP docker billeder, så vi kan bygge og teste opdaterede versioner af Deskpro med den lappede PHP. Deskpro Cloud vil forblive offline, indtil fixet er på plads, og vi vil bringe tjenester tilbage, så snart det er sikkert at gøre det. Næste opdatering er kl. 17.
- monitoring
PHP har offentliggjort rettelser for to kritiske sårbarheder, CVE- 2026- 109618 og CVE- 2026- 109619 (https: / / www.php.net / archive / 2026.php). Ifølge den britiske NCSC-vejledning (https: / / www.ncsc.gov.uk / news / crical- security- issue- relating- php) er Deskpro Cloud fortsat offline som en sikkerhedsforanstaltning. Vi bygger og tester lappede versioner nu. Cloud sites vil vende tilbage, når den lappede version er indsat og kontrolleres. Vi kan endnu ikke give en gendannelse tid. E-mail sendt til Cloud helpdesk under udfald er stadig ved at blive modtaget og vil blive behandlet, når tjenesten er genoprettet. Support: support.deskpro.com er offline. Please email support @ deskpro.com hvor vi overvåger indgående korrespondance. Self-hosted: Vi vil e-mail kunder, når en lappet udgivelse er tilgængelig. Indtil da bedes du følge vejledningen i vores tidligere e-mail i dag.
- monitoring
Vi fortsætter med at forberede og teste en lappet version af Deskpro ved hjælp af rettelser udgivet af PHP. Deskpro Cloud vil forblive offline indtil den lappede version er blevet indsat og kontrolleret, som af endnu, kan vi ikke give en gendannelse tid. E-mail sendt til Cloud helpdesk under udfald er stadig ved at blive modtaget og vil blive behandlet, når tjenesten er genoprettet. support.deskpro.com forbliver offline; venligst e-mail support @ deskpro.com. Self-hosted: Vi vil e-mail kunder, når en lappet udgivelse er tilgængelig. Indtil da bedes du følge vejledningen i vores tidligere e-mail i dag.
- monitoring
Vi arbejder stadig på den lappede version af Deskpro. Fremskridt er langsommere end vi forventede på grund af forsinkelser i tredjeparts software kilder, som vi og mange andre software-udbydere rundt om i verden afhænger af for PHP 's rettelser. Deskpro Cloud vil forblive offline indtil den lappede version er blevet indsat og kontrolleret. Vi kan endnu ikke give en gendannelse tid.
- monitoring
Vi fortsætter med at arbejde på den lappede version af Deskpro. Vi ser betydelige forsinkelser i tredjeparts software kilder, som vi og mange andre software-udbydere rundt om i verden afhænger af til PHP 's rettelser, og som giver os mulighed for at sende ændringer sikkert. Deskpro Cloud vil forblive offline indtil den lappede version er blevet indsat og kontrolleret. Vi kan endnu ikke give en gendannelse tid.
- monitoring
We are continuing to work on the patched version of Deskpro and have been able to make significant progress to being able to release. We are still seeing significant delays in the third-party software sources that is hampering us but continuing to monitor a progress where we can. Deskpro Cloud will stay offline until the patched version has been deployed and checked. We cannot yet give a restore time.
- monitoring
The patched versions for Deskpro have been built, tested and are being prepared for release. We are still seeing significant delays in the third-party software sources that is slowing us down from deploying but are continuing to work on this. Deskpro Cloud will stay offline until the patched version has been deployed and checked. We cannot yet give a restore time.
- monitoring
The patched versions for Deskpro have been built, tested and we are preparing to release. We are still seeing significant delays in the third-party software sources that is slowing us down from deploying but are continuing to work on this. Once we have successfully deployed the patches to Deskpro Cloud we will begin to return access to the helpdesks.
- monitoring
Deployment of the patched versions of Deskpro to Cloud customers is under way. We are rolling out the changes across our Cloud infrastructure, and helpdesks will begin coming back online once the patched versions are deployed and checked. We cannot yet give an exact restore time.
- monitoring
We have started bringing Deskpro Cloud helpdesks back online with the patched version. Helpdesks hosted in our EU region are now available again. We are working through the remaining regions and will restore access to the rest of our Cloud customers as each one is completed and checked. If your helpdesk is still showing this status page, it has not been restored yet; please bear with us.
- monitoring
Helpdesks hosted in our UK region are now back online with the patched version, joining our EU region. We are now working on our US region and will restore access to the remaining Cloud customers once it has been completed and checked. We cannot yet give an exact restore time for the US region. If your helpdesk is still showing this status page, it has not been restored yet; please bear with us.
- monitoring
The patched version has now been deployed to our US region and we are carrying out final checks before restoring access. Helpdesks in our EU and UK regions remain available. If your helpdesk is still showing this status page, it has not been restored yet; please bear with us.
- monitoring
All Deskpro Cloud helpdesks are now back online with the patched version, including those hosted in our US region. We will continue to monitor closely. If you notice anything unexpected with your helpdesk, please contact us via support.deskpro.com.
- resolved
All Deskpro Cloud helpdesks remain online on the patched version. We are now working through some follow-on effects of yesterday's outage. Email: Email sent to Cloud helpdesks during the outage has been processed. If you think a message is still missing, please contact our support team with the address it was sent to and roughly when. Self-hosted: Patched releases are available (Deskpro 2026.4.17 and DPC 2.27.13) and we strongly recommend customers update as per guidance from the UKs National Cyber Security Centre, the USAs National Security Agency and the EUs Agency for Cyber Security. A release for ARM servers will follow, and we will email affected customers when it is ready. If you notice anything else unexpected, please contact us via support.deskpro.com. References: - https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php - https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/ - https://www.enisa.europa.eu/news/joint-statement-on-critical-php-vulnerabilities
Automatisk oversat fra den officielle hændelsesopdatering.