Akamai outage, 21 October 2026

Customer Security Advisory: PHP Remote Code Execution Vulnerabilities

Started
Resolved
23 Oct 2026, 20:18 UTC (after 2 days)
Impact
Not stated
Affected
Akamai Customer Community

Is this still happening?

No. Akamai marked this incident resolved on 23 Oct 2026, 20:18 UTC, 2 days after it began.

Right now: Akamai reports degraded performance on some systems. (as of 26 Oct, 03:45 UTC) Live Akamai status

Last update from Akamai

We can confirm that remediation efforts for the reported vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were completed as of 20:06 UTC on October 23, 2026.We have found no evidence that these vulnerabilities impacted Akamai products, API calls, or Control Center. Customers and partners can view additional details by logging in to Control Center or contacting Akamai Support.We apologize for any concern this advisory may have caused and thank you for your patience and continued support. We remain committed to improving our systems and reducing the risk of similar issues in the future.

23 Oct 2026, 20:18 UTC

Read the full incident on the official Akamai status page

Similar Akamai incidents

Earlier incidents with the same affected part or wording - useful to see how long this kind of problem usually takes.

  1. , still open

    Customer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities

  2. , still open

    Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities

Other recent Akamai incidents

  1. Edge Delivery issues between Indonesia and Singapore

  2. Edge Delivery Secure CDN platform at Risk of Capacity Issues

  3. Web Security Analytics, Reporting and Configuration Deployment Issues

  4. NetStorage issues in Los Angeles

  5. Edge Delivery Issues

  6. Akamai Control Center and Configuration Deployment Issues

  7. Akamai Control Center and Configuration Deployment Issues

  8. Edge Delivery issues in Canada

All recorded Akamai incidents