Cloudinary outage, 21 October 2026
Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
- Started
- Resolved
- 21 Oct 2026, 18:22 UTC
- Impact
- Not stated
Is this still happening?
No. Cloudinary marked this incident resolved on 21 Oct 2026, 18:22 UTC.
Right now: Cloudinary reports all systems operational. (as of 26 Oct, 03:45 UTC) Live Cloudinary status
Last update from Cloudinary
Regarding the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 Cloudinary’s core platform, including its upload, transformation, and delivery APIs and Console, does not use PHP and is not affected by these vulnerabilities. Please note that customers who use the Cloudinary PHP SDK in their own applications should update PHP in their respective environments
Read the full incident on the official Cloudinary status page
Similar Cloudinary incidents
Earlier incidents with the same affected part or wording - useful to see how long this kind of problem usually takes.