We are aware of two critical vulnerabilities in the PHP programming language (CVE-2026-109618 and CVE-2026-109619), announced by the PHP project on 20 October 2026. According to CERT-EU, they may allow remote code execution without authentication and affect all PHP versions from PHP 5 onwards.
Most recent update 12:20 pm:
Our services will be completely unavailable today, 21 October 2026, from 12:15 pm (Finnish time). During this time, you will not be able to log in to our services. Websites running on LianaCMS and WordPress that we host for our customers will also be unavailable. We expect the downtime to last until 8:00 pm at the latest. Scheduled messages will be sent as normal during the downtime.
The downtime is purely a precautionary measure. We want to keep our services and your data secure until the official PHP fixes have been installed.
Update 11:20 am
Our teams are applying critical security changes to our services right now. We will install the official PHP fixes as soon as they are released, scheduled for 21 October 2026 at 17:00 Finnish time (14:00 UTC).
How this may affect you
While the changes are being rolled out, you may notice short interruptions, slower response times or temporarily unavailable features. We are working to keep any disruption as short as possible.
File imports are temporarily blocked
- uploading files to LianaPress
- manual Excel and CSV imports in LianaAutomation and LianaMailer
What you need to do
If you have questions, please contact our customer support at support@lianatech.com
[Sources: CERT-EU Security Advisory 2026-018, PHP announcement]
Comments
0 comments
Article is closed for comments.