We have successfully applied the necessary security patches to all public servers and verified their functionality.
All affected services have been fully restored, and we consider this incident resolved.
Posted Oct 21, 2026 - 21:41 CEST
Verifying
The PHP project has released the security fixes for the two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our team has reviewed the fix and prepared it for our portal servers. We are now testing the patched build in a separate test environment before rolling it out to production.
Access to the mbCONNECT24 portal remains restricted as a precaution until the update has been fully applied and verified. We will post the next update as soon as the rollout begins
Posted Oct 21, 2026 - 17:55 CEST
In progress
We will provide updates as necessary.
Posted Oct 21, 2026 - 15:00 CEST
Scheduled
The PHP project has announced two critical security vulnerabilities, with details to be published today at 4 PM CEST. As a precaution, we will restrict access to the Portal of our mbCONNECT24 portals no later than 3 PM CEST. We apologize for any inconvenience this may cause. We will keep you updated
Posted Oct 21, 2026 - 11:45 CEST
This scheduled maintenance affected: mbCONNECT24 Servers (mbCONNECT24 Europe V2, mbCONNECT24 Europe S2, mbCONNECT24 USA V2, mbCONNECT24 Australia V2, mbCONNECT24 Asia V2).