Cloudi-Fi - Status Page

All systems operational

Security update – PHP “PHP2Shell” vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Monitoring

  • On October 21, 2026, two critical vulnerabilities affecting PHP, publicly referred to as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619), were disclosed. When chained together, these vulnerabilities could allow unauthenticated remote code execution on servers running PHP.
    Our teams responded as follows (all times UTC):

    • October 21, 09:00 – Mitigation measures were applied across our infrastructure to block the known exploitation vector.

    • October 21, 14:00 – As soon as the PHP project published its security releases, we began upgrading our environments to the latest patched PHP versions.

    • October 21, 15:00 – The upgrade was completed on all internet-facing environments.


    Our internal environments are not exposed to this vulnerability and are also being upgraded.


    Our security investigation has found no evidence that these vulnerabilities were exploited on our systems. We continue to closely monitor our infrastructure.


    No action is required on your side. If you have any questions, please contact our support team.

    UTC
OCT30
Scheduled maintenance today, 29 October, 10:00 UTC
Planned10:00 AM – 12:00 PMUTC2 hours

  • Yesterday’s release was only partly deployed, so we will finish it during a maintenance window today.

    When: Thursday 29 October 2026, 10:00 to 12:00 UTC (11:00 to 13:00 Paris time)

    What is being deployed:

    • Session lifetime and account duration become two separate settings. You can set how long a guest stays connected without changing how long their account stays valid.

    • We will move your existing duration values to the new settings automatically. Your guests will connect the same way they do today.

    • Your access policy settings in the admin portal get two new fields, “Session lifetime” and “Account duration”, with clearer labels and defaults.

    No action is required on your side. We will confirm by email once the maintenance is complete. After the window, we recommend that you review the new session lifetime and account duration values in your access policies.

    If you notice any unexpected behaviour during or after the window, please contact our support team.

    Thank you for your understanding.

    October 29, 2026 at 8:28 AMUTC

Captive Portals - Operational

100% uptime

Admin Interface - Operational

100% uptime

Recent notices

Show history
Show history