PHP vulnerabilities announced

Incident Report for Akeneo

Resolved

Our mitigation work is complete. PIM SaaS is now running a patched version of PHP, which includes fixes for both identified vulnerabilities.⁠

PIM SaaS instances continue to operate normally, and no action is required on your end.⁠

Thank you for your understanding.
Posted Oct 21, 2026 - 18:57 CEST

Identified

We are aware of two critical PHP vulnerabilities announced yesterday and are treating this as a high-priority security matter. Protecting your business and data is our priority.

Our engineering team is actively assessing the potential impact on Akeneo services, and mitigation work is already underway. In parallel, we are closely monitoring the PHP security release and will provide further updates here as our assessment and remediation progress.

Your PIM instance is running normally. We will let you know if any action is required on your end.
Thank you for your understanding.
Posted Oct 21, 2026 - 13:30 CEST
This incident affected: PIM SaaS (UI, REST API, GraphQL API).