Vendor reports: partial outageOpen · vendor status “monitoring”Official status API

PHP Security Vulnerability Assessment (CVE-2026-109618 & CVE-2026-109619)

Reported by Liquid Web · Hosting, CDN & Edge · source last read 5 min ago

Official source (opens in a new tab)
Vendor start
Oct 21, 2026, 15:39 UTC
Vendor's clock
Resolved
Not yet
Still open
First seen by Statuswall
Before tracking began
Statuswall's clock
Duration
Not available
Needs both vendor times

Summary

Built from the facts below, no AI

Potential impact, not a confirmed outage of your systems.

What the vendor confirmed

  • Liquid Web reports partial outage: "PHP Security Vulnerability Assessment (CVE-2026-109618 & CVE-2026-109619)".[E1, E2]
  • It is not resolved yet (vendor status "monitoring").[E3, E7]

Affected products and regions

  • Components: Cloud Dedicated, Cloud VPS Hosting, CPanel, InterWorx, Plesk.[E6]

What is unknown

  • Which regions are affected: the vendor did not say.[E5]
  • Whether your own systems are affected: a vendor report cannot tell you; check your monitoring.
  • When it will be resolved: no estimate is shown unless the vendor publishes one on its page.

Last update in these facts: 2026-10-21 15:39 UTC · summary s1, evidence 30b6f060c7e22343

Evidence (7)
  1. E1Liquid Web reports partial outage. (vendor) source (opens in a new tab)
  2. E2Vendor title: "PHP Security Vulnerability Assessment (CVE-2026-109618 & CVE-2026-109619)". (vendor) source (opens in a new tab)
  3. E3Vendor status word: "monitoring". (vendor) source (opens in a new tab)
  4. E4Vendor-reported start: 2026-10-21 15:39 UTC. (vendor) source (opens in a new tab)
  5. E5The vendor did not state which regions are affected. (Statuswall)
  6. E6Components the vendor attached: Cloud Dedicated, Cloud VPS Hosting, CPanel, InterWorx, Plesk. (vendor) source (opens in a new tab)
  7. E7Not resolved by the vendor yet. (vendor) source (opens in a new tab)

Affected scope

Not stated by the vendor

Components: Cloud Dedicated, Cloud VPS Hosting, CPanel, InterWorx, Plesk

No region Statuswall recognises is stated for this incident (place names and provider-specific codes are not converted). It is not assumed to be global.

Potential relevance

Liquid Web is not in your stack. Follow it to see whether reports like this fall inside the regions you use.

What to check on your side

Verification steps only. Statuswall cannot see your systems.

  • Check edge error rates and cache hit ratio, and origin load for a sudden rise.
  • Test from more than one network or location: edge problems are often local.
  • Check error rates, latency and timeouts in your own monitoring for requests that depend on Liquid Web.
  • Look at synthetic checks and alerts that exercise Liquid Web.
  • Compare with recent deploys on your side, so a coincidental change is not blamed on the vendor.
  • Follow the vendor's official incident page for scope changes and resolution.

Timeline

Vendor times come from the vendor. “Seen by Statuswall” times are when Statuswall noticed a change, which can lag the vendor by a few minutes. Statuswall does not store the vendor's update text; read it on the official page.

  1. Oct 21, 2026, 15:39 UTCVendor-reported startVendor time

No changes observed yet. Statuswall began recording changes on incidents in November 2026.