Update on PHP security vulnerability

Minor · Started Oct 21, 2026 · 9:38 PM

Duration

1h 53m
Severity

Minor
Detection lead

—
User reports

—

Summary

Update on PHP security vulnerability

HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.

Started

Oct 21, 2026 · 9:38 PM
Resolved

Oct 21, 2026 · 11:31 PM
Duration

1h 53m
Severity

None

Event timeline

How this incident unfolded

◐

Investigating
Oct 21 · 9:38 PM HubSpot

HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.
◉

Monitoring
Oct 21 · 10:00 PM HubSpot

HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.
✓

Resolved
Oct 21 · 11:31 PM HubSpot

HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.