Past Incidents

Due to the critical PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619) and delays in patch availability caused by high worldwide demand, we have temporarily taken all sites offline as a precaution. We will bring them back as soon as the updated PHP version is installed on our infrastructure. We will post an update here as soon as the sites are available again.

Update 17:10: We expect to be able to update our infrastructure shortly and will install the PHP security updates as soon as they’re available. Some components in our supply chain are still waiting for updates from their providers and are offline themselves until then. Because of this, we can’t give a firm time yet.

To be safe, the sites will stay offline until the updates are installed. We’ll post another update here as soon as the sites are back.

Update 18:20: The updated PHP packages our infrastructure setup have not been officially published yet. We therefore can’t install the security updates yet. The sites will stay offline as a precaution until then. We’re following the release closely and will start the update as soon as the packages are available. We're expecting the upgrades to start around 20:00.

Update 21:00: The updated PHP packages our infrastructure setup have not been officially published yet. We're expecting the upgrades to start around 21:30.

Update 21:50: We're starting the upgrade process.

We're aware that our external monitoring service (StatusCake) is currently reporting some websites in our portfolio as unavailable. These sites are served through Cloudflare, and the alerts are false positives: the affected websites are online and working normally.

The issue appears to be between StatusCake's test locations and Cloudflare's network, not with the websites or our hosting. No action is needed from you, and there's no impact on visitors.

We're monitoring the situation and working on a fix for the monitoring checks. If you notice any actual problems accessing your site, please contact our support team as usual.

Update 22:00: Monitoring has returned to normal. The alerts were false positives and no sites were affected.

The Drupal Security Team has announced an upcoming critical security release affecting Drupal core. The security updates are scheduled for October 14, 2026, between 18:00 and 23:00 CEST.

Ramsalt is monitoring the situation and will assess which customer websites are affected as soon as the security advisories and updates become available.

We will prioritize the necessary security updates and apply them to affected websites as soon as possible.

Update 22:15: all affected sites have been updated