Security Advisory: Critical PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)– No impact to Centrilogic services
Subscribe
Monitoring - Summary:
We are aware of two critical remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619. Both have been rated 9.2 (Critical) on the CVSS v4.0 scale by the PHP security team. We are monitoring the situation closely.
Is Centrilogic impacted?
No. Our investigation shows that Centrilogic’s platforms, infrastructure and managed service tooling do not run affected PHP components and are not impacted. No customer action is required for services we operate. We will update this notice if those changes.
What we know:
PHP announced an out-of-cycle security release for October 21, 2026, at 14:00 UTC (10:00 EST), after details of the flaws leaked ahead of the planned disclosure. Third-party reporting suggests a very wide range of PHP versions (PHP 5.x and later) may be affected. PHP has not yet confirmed affected versions, root cause or exploitation conditions. As of this posting, no exploitation in the wild has been publicly reported.
Customers running their own PHP workloads, Websites, web applications, CMS platforms (e.g., WordPress, Drupal, Magento) and hosting panels that use PHP may be affected, depending on version.
How to check whether you are exposed:
Identify PHP versions on your servers. Run php -v for the command line or check your package manager (dpkg -l | grep php or rpm -qa | grep php). The version used by your web server can differ from the command line version. Confirm it with a phpinfo() page or ask your hosting provider.
Check containers, hosting control panels and third-party applications that bundle their own PHP. PHP 8.1 and earlier are end of life and may not receive a fix. Plan to upgrade to a supported version.
Patch information:
Apply the fixed PHP releases published on https://www.php.net/, or the updated packages from your OS or distribution vendor. If you use a managed or shared host, confirm with the provider that they are patching. Until you can patch, restrict public exposure of PHP applications where possible. Also watch for PHP or web server processes unexpectedly launching shells or download tools, which could indicate compromise.
For any issues, please contact support through your usual channels. We remain committed to supporting you throughout this. Thank you for your understanding.
The Centrilogic Team
https://www.centrilogic.com
Oct 21, 2026 - 10:20 EDT
We are aware of two critical remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619. Both have been rated 9.2 (Critical) on the CVSS v4.0 scale by the PHP security team. We are monitoring the situation closely.
Is Centrilogic impacted?
No. Our investigation shows that Centrilogic’s platforms, infrastructure and managed service tooling do not run affected PHP components and are not impacted. No customer action is required for services we operate. We will update this notice if those changes.
What we know:
PHP announced an out-of-cycle security release for October 21, 2026, at 14:00 UTC (10:00 EST), after details of the flaws leaked ahead of the planned disclosure. Third-party reporting suggests a very wide range of PHP versions (PHP 5.x and later) may be affected. PHP has not yet confirmed affected versions, root cause or exploitation conditions. As of this posting, no exploitation in the wild has been publicly reported.
Customers running their own PHP workloads, Websites, web applications, CMS platforms (e.g., WordPress, Drupal, Magento) and hosting panels that use PHP may be affected, depending on version.
How to check whether you are exposed:
Identify PHP versions on your servers. Run php -v for the command line or check your package manager (dpkg -l | grep php or rpm -qa | grep php). The version used by your web server can differ from the command line version. Confirm it with a phpinfo() page or ask your hosting provider.
Check containers, hosting control panels and third-party applications that bundle their own PHP. PHP 8.1 and earlier are end of life and may not receive a fix. Plan to upgrade to a supported version.
Patch information:
Apply the fixed PHP releases published on https://www.php.net/, or the updated packages from your OS or distribution vendor. If you use a managed or shared host, confirm with the provider that they are patching. Until you can patch, restrict public exposure of PHP applications where possible. Also watch for PHP or web server processes unexpectedly launching shells or download tools, which could indicate compromise.
For any issues, please contact support through your usual channels. We remain committed to supporting you throughout this. Thank you for your understanding.
The Centrilogic Team
https://www.centrilogic.com
Oct 21, 2026 - 10:20 EDT
About This Site
Centrilogic provides this site to our customers for the purpose of sharing our current and proposed maintenance schedules, and to highlight incidents that may affect the stability of the services we offer.
If you are experiencing any issues with your services, please contact us at our support email or call our 24/7 customer hotlines:
United States and Canada: 1-888-999-3091 “Option 2”
United Kingdom : 0203 004 6320 “Option 2″
From Other Areas: 1-585-277-1300
NOTE - you can optionally SUBSCRIBE to get real-time updates delivered via email or SMS.
DISCLAIMER: This page does not measure or report our SLA's - this is informational only - and not part of any Centrilogic MSA. The information here may not be represented in real-time.
Network (Internet transit, Core routing/switching, backbone systems)
Operational
GTA Network
Operational
ROC Network
Operational
BUF Network
Operational
VAN Network
Operational
CTL-Metro Network
Operational
ARL Network
Operational
Calgary DC
Operational
LEN Network
Operational
Services (Dedicated and Shared hosting, Colocation, CPE)
Operational
CA - Services
Operational
USA-Services
Operational
UK-Services
Operational
Calgary DC
Operational
Customer Services (Communication, Staffing, COVID, Monitoring)
Operational
Centrilogic Phone Systems
Operational
Centrilogic Website
Operational
Zoom Meetings
Operational
Slack Messaging
Operational
Zoom Phones
Operational
Statuspage HTTPS Pages
Operational
Statuspage Slack
Operational
Statuspage SMS Notifications
Operational
Statuspage Email Notifications
Operational
Environmental (Power/Cooling/Security)
Operational
ROC Environmental
Operational
LEN Environmental
Operational
BUF Environmental
Operational
GTA Environmental
Operational
VAN Environmental
Operational
CTL-Metro Environmental
Operational
ARL Environmental
Operational
Calgary DC
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.
Scheduled Maintenance
Centrilogic Scheduled Maintenance Notification, October 28th, 2026 01:00 AM ET to 08:00 AM ET Oct 28, 2026 01:00-08:00 EDT
Centrilogic Scheduled Maintenance Notification
Maintenance Window: October 28th, 2026
Start Time: 01:00 AM ET
End Time: 08:00 AM ET
Service Call in Reference Number: INC0287925
Services Affected: Centrilogic Data Centre Backhaul Connectivity
Service Location(s): Vancouver DC - Tranmere DC
Expected Impact: Possible network reconvergence lasting 5–10 minutes.
Details: Centrilogic's carrier partners will be performing scheduled maintenance on a network link providing connectivity between Centrilogic data centers. Redundant connectivity is in place to maintain service availability during this maintenance. While we realistically expect we do not expect an impact, there is a possibility that CORE network traffic flow could lead to a reconvergence period of 5 to 10 minutes.
Centrilogic’s support team will be available for assistance 24/7. For questions, concerns, or to report a problem about this notification, please contact our Operations Center:
To open a trouble ticket: support@centrilogic.com
To open an emergency ticket: emergency@centrilogic.com
Phone: 1-888-999-3091, Option 2
The Centrilogic Team
https://www.centrilogic.com
Posted on Oct 21, 2026 - 04:43 EDT
Maintenance Window: October 28th, 2026
Start Time: 01:00 AM ET
End Time: 08:00 AM ET
Service Call in Reference Number: INC0287925
Services Affected: Centrilogic Data Centre Backhaul Connectivity
Service Location(s): Vancouver DC - Tranmere DC
Expected Impact: Possible network reconvergence lasting 5–10 minutes.
Details: Centrilogic's carrier partners will be performing scheduled maintenance on a network link providing connectivity between Centrilogic data centers. Redundant connectivity is in place to maintain service availability during this maintenance. While we realistically expect we do not expect an impact, there is a possibility that CORE network traffic flow could lead to a reconvergence period of 5 to 10 minutes.
Centrilogic’s support team will be available for assistance 24/7. For questions, concerns, or to report a problem about this notification, please contact our Operations Center:
To open a trouble ticket: support@centrilogic.com
To open an emergency ticket: emergency@centrilogic.com
Phone: 1-888-999-3091, Option 2
The Centrilogic Team
https://www.centrilogic.com
Posted on Oct 21, 2026 - 04:43 EDT
Centrilogic Scheduled Maintenance Notification, November 03rd, 2026, 10:00 ET to November 28th 11:00 ET Nov 3, 2026 10:00 - Nov 28, 2026 11:00 EST
Centrilogic Scheduled Maintenance Notification
Maintenance Window:
Gen 1 – November 3, 2026
Gen 2 – November 4, 2026
Gen 3 - November 5, 2026
Gen 4 – November 6, 2026
November 16-19, 2026 - 7:00 AM to 8:00 AM - Quarterly Inspection for Generators #5 and #6
November 18, 2026 - 7:00 AM to 8:00 AM - Quarterly Inspection for Generator #7
November 21, 2026 - 7:00 AM to 8:00 AM - October 2026 Emergency Power Generator Test Schedule for Generator #5
November 28, 2026 - 7:00 AM to 8:00 AM - October 2026 Emergency Power Generator Test Schedule for Generators #6 and 7
Start Time: November 3rd, 2026, 10:00 AM ET
End Time: November 28th, 2026, 11:00 AM ET
Service Call in Reference Number: INC0287326
Services Affected: Building Power Infrastructure, Generator Systems, Major Preventative Maintenance, Load Bank Testing, Quarterly Generator Inspections, and Emergency Power Generator Testing.
Service Location(s): 555 West Hastings Street, Vancouver, BC
Expected Impact: No outage or service interruption is expected. Sufficient power redundancy and backup systems will be available throughout the maintenance activities.
Details: Our carrier partner has advised that the building landlord will be performing scheduled power infrastructure maintenance, including Major Preventative Maintenance and Load Bank Testing of generators, Quarterly Generator Inspections, and Emergency Power Generator Testing. These activities are being conducted to ensure the continued reliability and resiliency of the facility's power systems. No impact is expected during the maintenance window.
If your contact information is incorrect, has recently changed, or you feel you have received this notification in error, please kindly provide us with your new details so we can ensure you do not miss any future communications.
Centrilogic’s support team will be available for assistance 24/7. For questions, concerns, or to report a problem about this notification, please contact our Operations Center:
To open a trouble ticket: support@centrilogic.com
To open an emergency ticket: emergency@centrilogic.com
Phone: 1-888-999-3091, Option 2
The Centrilogic Team
https://www.centrilogic.com
Posted on Oct 13, 2026 - 21:59 EDT
Maintenance Window:
Gen 1 – November 3, 2026
Gen 2 – November 4, 2026
Gen 3 - November 5, 2026
Gen 4 – November 6, 2026
November 16-19, 2026 - 7:00 AM to 8:00 AM - Quarterly Inspection for Generators #5 and #6
November 18, 2026 - 7:00 AM to 8:00 AM - Quarterly Inspection for Generator #7
November 21, 2026 - 7:00 AM to 8:00 AM - October 2026 Emergency Power Generator Test Schedule for Generator #5
November 28, 2026 - 7:00 AM to 8:00 AM - October 2026 Emergency Power Generator Test Schedule for Generators #6 and 7
Start Time: November 3rd, 2026, 10:00 AM ET
End Time: November 28th, 2026, 11:00 AM ET
Service Call in Reference Number: INC0287326
Services Affected: Building Power Infrastructure, Generator Systems, Major Preventative Maintenance, Load Bank Testing, Quarterly Generator Inspections, and Emergency Power Generator Testing.
Service Location(s): 555 West Hastings Street, Vancouver, BC
Expected Impact: No outage or service interruption is expected. Sufficient power redundancy and backup systems will be available throughout the maintenance activities.
Details: Our carrier partner has advised that the building landlord will be performing scheduled power infrastructure maintenance, including Major Preventative Maintenance and Load Bank Testing of generators, Quarterly Generator Inspections, and Emergency Power Generator Testing. These activities are being conducted to ensure the continued reliability and resiliency of the facility's power systems. No impact is expected during the maintenance window.
If your contact information is incorrect, has recently changed, or you feel you have received this notification in error, please kindly provide us with your new details so we can ensure you do not miss any future communications.
Centrilogic’s support team will be available for assistance 24/7. For questions, concerns, or to report a problem about this notification, please contact our Operations Center:
To open a trouble ticket: support@centrilogic.com
To open an emergency ticket: emergency@centrilogic.com
Phone: 1-888-999-3091, Option 2
The Centrilogic Team
https://www.centrilogic.com
Posted on Oct 13, 2026 - 21:59 EDT