Pantheon outage, 23 October 2026

PHP Vulnerability CVE-2026-115560

Started
Resolved
23 Oct 2026, 17:35 UTC
Impact
Not stated
Affected
Customer Sites

Is this still happening?

No. Pantheon marked this incident resolved on 23 Oct 2026, 17:35 UTC.

Right now: Pantheon reports all systems operational. (as of 26 Oct, 03:47 UTC) Live Pantheon status

Last update from Pantheon

RESOLVED: PHP CVE-2026-115560 mitigation Pantheon is aware of the release of CVE-2026-115560 from PHP.net; the recommended remediations for this vulnerability were already in place prior to the announcement. No action is required.

23 Oct 2026, 17:35 UTC

Read the full incident on the official Pantheon status page

Similar Pantheon incidents

Earlier incidents with the same affected part or wording - useful to see how long this kind of problem usually takes.

  1. , resolved after 26 h 32 min

    PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619

  2. , resolved after 29 h 18 min

    Drupal core critical security update (CVE-2026-108097)

  3. , resolved after 5 h 17 min

    Database Connection Issues and 504 Errors on a Subset of Sites

  4. , resolved after 5 days

    Security Advisory: Malicious Activity Affecting Platform Hosts

  5. , resolved after 3 days

    Security Advisory: Unauthorized Access to Customer Accounts via a Look-alike Sign-in Page

Other recent Pantheon incidents

  1. Environment Creation and Multidev Failures

  2. Terminus Service Disruption

  3. Workflow Failures

  4. Dashboard not loading

  5. Intermittent Dashboard and Workspace Errors

  6. Appserver availability interruptions

  7. Database Connection Issues and 504 Errors on Subset of Sites

  8. Dashboard Outage

All recorded Pantheon incidents