Is Aptible Down?

We are aware of a security incident involving compromised eMudhra Certificate Authority (CA) certificates that could affect HTTPS security on systems with outdated certificate trust stores. The Aptible platform is not directly impacted by this issue. However, as a precaution, we recommend that customers: - Update operating systems and web browsers to their latest security-patched versions to ensure certificate trust stores are current. - Upgrade to Aptible CLI v1.0.5, which includes additional mitigations for systems whose OS trust stores have not yet been updated: https://www.aptible.com/docs/reference/aptible-cli/overview For additional background, see Cloudflare's security advisory: https://blog.cloudflare.com/emudhra-certificate-compromise

This incident has been resolved. --- [2026-10-21T09:04:11.963-04:00] (monitoring) Aptible is aware of the vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP applications that can allow for remote code execution under certain conditions. *Aptible Platform Impact* Aptible has reviewed all infrastructure components that we manage and has confirmed that all are unaffected by this vulnerability. *Customer Application Impact:* Any customer using PHP in their applications is highly encouraged to take action and patch their applications as soon as possible. If you are unable to patch in a timely manner, consider taking your application offline in the interim. Note for the safety of the Aptible platform, we may disable endpoints for applications that show evidence of being exploited by RCE. Aptible provides the platform your application runs on. The PHP runtime version your app uses is controlled by your app's configuration. We cannot patch this for you automatically. Update your PHP version and redeploy as soon as the fixed release is available for your branch. If you need help with these upgrades, reach out to Aptible support. *Additional Resources:* - Official PHP advisory: https://www.php.net/index.php#2026-10-20-1 - Proof of concept exploit: https://jackalsyn.com/posts/php-up-2026.html - CVE-2026-109618, CVE-2026-109619 We will update this notice as the situation develops.

This incident has been resolved. --- [2026-09-23T17:07:06.255-04:00] (investigating) We are continuing to investigate this issue. We will update this notice when we restore SSH on Shared Stacks, or by 9 am ET, 2026-09-24. --- [2026-09-23T11:12:51.827-04:00] (investigating) Aptible SSH sessions on Shared Stacks are temporarily unavailable. We disabled these sessions while we assess a recently reported Linux kernel vulnerability. We have not confirmed any impact to Aptible at this time, but continue our investigation today. Apps, databases, deploys, and endpoints on Shared Stacks are operating as usual. Aptible SSH on Dedicated Stacks remains available. No action is needed. We will update this notice when we restore SSH on Shared Stacks, or by 5pm ET, 2026-09-23.