← Status overview

Incident report

Verbleif temporarily offline due to critical PHP vulnerabilities (PHP2Shell)

Resolved

Started Resolved Impact Major

Affected systems Notifications Integrations API Web application Login Realtime updates Mobile sync

Timeline

All updates

Most recent update first.

    1. Resolved

      Verbleif is back online. We have installed and verified the PHP security update (8.5.12) on all systems. The web application, the mobile app, login, notifications and integrations work as normal again. Your data has remained safe. Thank you for your patience.

    2. Identified

      Verbleif is temporarily unavailable. Because of two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619, also known as PHP2Shell) we have taken our systems offline as a precaution. The web application, the mobile app, login, notifications and integrations do not work in the meantime. Your data is safe.

      As soon as the PHP security update is available, we install and verify it. After that Verbleif comes back online. We will post an update here as soon as we know more.

Help us

Report an issue

Tell us what you are seeing. Our team reviews new reports during business hours.