Kinsta outage, October 2026: Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026)
Kinsta reported and resolved an incident: Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026). It lasted 4 days.
OKResolved
From Kinsta's official status page, in their words.
What happened
- Started
- Resolved
- Duration
- 4 days
- Impact
- none
Why it happened
Kinsta has not given a cause in its updates. We never guess one.
Timeline
Newest first. From Kinsta's official status page, in their words.
- resolved
We can confirm that the mitigations have been successful and no compromises have occurred as a result of this. If you have any other questions, please contact our support team at support@kinsta.com.
- investigating
There were reports of a new vulnerability CVE-2026-115560, after the previous two were patched on October 22 on our platform. We already have mitigations against this, so there shouldn't be any incidents related to this. We'll post updates if there are any news.
What this means for a business (and what to check now)
- Retry anything that failed during the 4 days.
- Enter any payments, bookings or jobs you took another way.
- If a deadline fell inside the window, keep this page as your record of the outage.
The full guide: what to do when a service you rely on is down
Other Kinsta incidents
- Downloadable Backup actions are stuck in processing status in the MyKinsta Dashboard., resolved after 1.3 hours
- MyKinsta Maintenance, maintenance scheduled
- MFA emails not being sent for MyKinsta, resolved after 1.7 hours
- PHP Security Vulnerability Update, resolved after 13.4 hours
- Partial outage in London datacenter, resolved after 15.5 hours
Hear about the next Kinsta incident as it starts
Free email alerts when the official status changes, with what to do while it is down.