Envoke Status · History · Incident #151595

RESOLVED

Security update

Minor · Started Oct 21, 2026 · 11:04 AM

  • Duration

    4h 18m

  • Severity

    Minor

  • Detection lead

    —

  • User reports

    —

Summary

Security update

We have installed all security patches for the recently announced PHP vulnerabilities on all Envoke systems.


  • Started

    Oct 21, 2026 · 11:04 AM

  • Resolved

    Oct 21, 2026 · 3:23 PM

  • Duration

    4h 18m

  • Severity

    None

Event timeline

How this incident unfolded

  • ◐

    Investigating

    Oct 21 · 11:04 AM Envoke

    Two critical security vulnerabilities were recently identified in PHP, a programming language used by Envoke and countless websites and IT systems worldwide. Our team has been monitoring the situation and is taking steps to protect Envoke. We have not detected any attacks on our systems, and no action is needed on your part. Updates will be posted at status.envoke.com

  • ◉

    Monitoring

    Oct 21 · 11:43 AM Envoke

    The first security issue has been mitigated. The second issue has been partially mitigated and is now subject to close monitoring. We are waiting for another patch, which is currently being developed and expected in the next two hours.

  • ◉

    Monitoring

    Oct 21 · 2:29 PM Envoke

    The security updates are now available and are currently being tested and installed. In the interim, some functionality restrictions are in place within the app to mitigate the risk of vulnerabilities. We'll post another update as soon as the security update is applied. We anticipate this will be completed within two hours.

  • ✓

    Resolved

    Oct 21 · 3:23 PM Envoke

    We have installed all security patches for the recently announced PHP vulnerabilities on all Envoke systems.

Get an email when Envoke opens, updates or resolves an incident.

Add it as a dependency monitor. The Free plan includes one.