Is Hosted Mender Down?

We noticed an issue with the email sending system from both hosted Mender US and hosted Mender EU, we found the root cause and fixed it. No email has been sent starting from 12:30AM UTC on Tuesday 27th, to about 10AM UTC on Wednesday 28th. We are really sorry for this incident, we're gathering all the data and we'll publish a post mortem soon.

See the full Post Mortem on our Blog Post: [https://mender.io/blog/incident-debrief-mender-email-invitations-abused-for-spam-emails](https://mender.io/blog/incident-debrief-mender-email-invitations-abused-for-spam-emails) --- [2026-10-23T19:50:01.798Z] (resolved) This incident has been resolved --- [2026-10-23T16:15:39.261Z] (monitoring) A fix has been implemented and we are monitoring the results. --- [2026-10-23T15:24:27.809Z] (identified) The issue has been identified and a fix is being implemented. --- [2026-10-23T14:46:47.077Z] (investigating) We are investigating an issue affecting outgoing emails from Hosted Mender. Emails such as password resets, user invitations and notifications may be delayed or not delivered. Device connectivity, deployments and all other platform functionality are not affected.

The PHP project recently announced two critical security vulnerabilities. You can read more about these on their websites: https://www.php.net/archive/2026.php#2026-10-21-5 As IT teams are handling these vulnerabilities, figuring out where they are affected and what systems need to be upgraded, we've gotten requests to clarify if Mender is affected or not from customers. Thus, to make this information easily available to everyone we've decided to put this clarification here; Mender Client, Mender Server / Backend, and hosted Mender do not use PHP, and are not affected by these vulnerabilities. The mender.io website is hosted by Hubspot, and does not use PHP, so is also not affected. This is from HubSpot's website / incident status page: HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes. The Mender documentation, at docs.mender.io, does use PHP, and was assumed to be affected, so it was upgraded from PHP 8.3.35 to 8.3.36 this morning (Oct 22nd), at around 6AM UTC+2. The documentation site is hosted on infrastructure entirely separate from the hosted Mender production systems, and we have not seen any indication that the documentation site was being attacked or exploited prior to the upgrade. So, after upgrading the Mender documentation site, no part of the Mender product or its websites should be affected by these PHP vulnerabilities. We wish IT and security teams the best of luck in handling these vulnerabilities. This announcement has been published to our Blog Post as well: https://mender.io/blog/clarifications-regarding-recent-php-vulnerabilities-cve-2026-109618-cve-2026-109619