Is Laravel Forge Down?

Earlier today we emailed customers that an updated kernel for CVE-2026-98432 had been installed on their servers and only needed a reboot. The update is still rolling out, and it hasn't reached every server yet. On those servers, rebooting won't change anything until the update is installed. To check a server, first find your Ubuntu version: lsb_release -rs Then check the running kernel: uname -r You're patched if it shows this version or newer for your Ubuntu version: Ubuntu 22.04: 5.15.0-203 (AWS: 5.15.0-1120 or 6.8.0-1069) Ubuntu 24.04: 6.8.0-149 (AWS: 6.8.0-1069) Ubuntu 26.04: 7.0.0-43 (AWS: 7.0.0-1017) If your version is older and you don't want to wait, you can update it yourself: sudo apt update sudo apt install --only-upgrade linux-generic linux-image-generic linux-headers-generic linux-virtual linux-image-virtual linux-aws linux-image-aws linux-headers-aws linux-gcp linux-image-gcp linux-headers-gcp This command covers all common server setups. It upgrades only the kernel packages already on your server and skips the rest, so it won't install anything new. Then reboot the server and check uname -r again.

This incident has been resolved. --- [2026-10-26T12:18:27.265Z] (monitoring) The upstream package repository that Forge uses to install PHP has recovered, and server provisioning has been re-enabled. New servers can be provisioned again, and PHP installations and updates from the Forge control panel are working as expected. If a provision or PHP update failed during this incident, please try it again. We are continuing to monitor and will post a final update once we are confident the issue is fully resolved. --- [2026-10-26T11:58:24.838Z] (identified) We are investigating an issue that is causing new server provisioning and PHP installations or updates from the Forge control panel to fail on servers running Ubuntu 22.04 and Ubuntu 24.04. Servers running Ubuntu 26.04 are not affected. The problem is caused by an upstream package repository that Forge uses to install PHP.To prevent further failed provisions, we have temporarily disabled server provisioning while we resolve this. Existing servers and sites continue to run normally, but PHP installations and updates on affected servers may fail until the fix is in place.We will post another update as soon as we have more information.

Patched PHP packages are now available for servers on Ubuntu 22.04 and 24.04: PHP 8.2, 8.3, 8.4 or 8.5: go to your server in Forge and click “Update PHP”. Do this for each server. Updates may take longer than usual to finish. If that fails, update PHP over SSH using our guide: https://laravel.com/forge/docs/knowledge-base/php-security-release-october-2026 Ubuntu 20.04 or older: you won’t be able to update PHP. Create a new server on a supported Ubuntu version and move your sites to it. Until then, we recommend powering down the old server. PHP 8.0 or 8.1: no patch is available. Please upgrade to PHP 8.2 or later as soon as possible. Node.js: remember to update it yourself on each server. --- [2026-10-21T18:06:01.566Z] (monitoring) For servers running Ubuntu 26, the latest PHP patch is available and can be deployed. Please follow our published guide: https://laravel.com/forge/docs/knowledge-base/php-security-release-october-2026 For servers running on older versions, the patch is becoming available right now (but availability is still not 100% covered across all older versions). We will keep everyone updated as we are following the progress here closely. --- [2026-10-21T17:03:34.972Z] (monitoring) PHP has been updated across Forge servers. We are currently working through a high volume of queued update jobs - if your server has not yet received the update, it will shortly. If you need to apply the update immediately, you can do so by accessing your server directly via SSH and following our guide: https://laravel.com/forge/docs/knowledge-base/php-security-release-october-2026 Upstream Launchpad PPAs have not yet received patched PHP release. --- [2026-10-21T16:44:15.429Z] (monitoring) We’re aware that servers running Ubuntu 22.04 and 24.04 may not yet receive the latest PHP 8.x updates when updating PHP through Forge. This is because the updated packages haven’t been published to the upstream repository Forge installs PHP from. This is outside Forge’s control, and there’s no action needed on your part. We’re monitoring the repository closely and will post an update here as soon as the new versions are available.