All Systems Operational

Cartika Toronto Operational
Shared Email Operational
Shared Web Operational
Shared Database Operational
Cloud Email Operational
Public Cloud Operational
Access Management Operational
Mobile VPN Operational
Big Data Operational
Backups Operational
Cartika Accounts Portal Operational
Cartika Dallas Operational
Shared Email Operational
Shared Web Operational
Shared Database Operational
Cloud Email Operational
Public Cloud Operational
Access Management Operational
Mobile VPN Operational
Backups Operational
Big Data Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Oct 22, 2026

No incidents reported today.

Oct 21, 2026

Resolved - We are aware of two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, announced on October 21, 2026. These vulnerabilities may allow attackers to execute malicious code on affected systems.

------------------------------------
Actions Taken
------------------------------------
For servers running cPanel/CloudLinux and H-Sphere under our management, we have applied the available security updates and made additional PHP configuration changes to help mitigate the vulnerabilities:


session.upload_progress.enabled = 0

session.upload_progress.cleanup = Off


These configuration changes provide additional hardening alongside the security updates.

------------------------------------
Self-Managed Servers
-------------------------------------
Customers who manage their own servers are responsible for applying the relevant PHP security updates and recommended PHP configuration changes.

For assistance with updating your server or applying the recommended PHP configuration changes, please contact our support team at support@cartika.com.

-------------------------------------
Cloudflare Protection
-------------------------------------
For domains using Cloudflare, Cloudflare has deployed Web Application Firewall (WAF) rules to help protect against known attempts to exploit these PHP vulnerabilities. This provides an additional layer of security for your website. However, we still recommend updating PHP and applying the recommended configuration changes to ensure your server is properly protected.

For managed VMs, we have applied the available PHP security updates and recommended configuration changes. For self-managed VMs, customers are responsible for applying the required PHP updates and configuration changes. If you need assistance or more info, please contact our support team at support@cartika.com.


-------------------------------------
Need Assistance or Patch Verification?
-------------------------------------
If you have questions about these vulnerabilities, need help determining whether your server is affected, or would like a report confirming your server's patch status, please contact our support team at support@cartika.com.


--------------------------------------
Additional Resources
--------------------------------------
PHP Security Announcement: https://www.php.net/archive/2026.php#2026-10-21-5

cPanel Security Advisory: https://support.cpanel.net/hc/en-us/articles/44397389677335-Critical-PHP-Security-Release-CVE-2026-109618-and-CVE-2026-109619

CloudLinux Security Advisory: https://blog.cloudlinux.com/php-cve-2026-109618-and-cve-2026-109619

Cloudflare WAF Protection: https://blog.cloudflare.com/php-vulnerabilities-waf-protection
-------------------------------------

We take the security of our hosting environments seriously and have taken steps to address these vulnerabilities on the managed servers within our scope.

Thank you,

Oct 21, 23:38 EDT

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

Completed - The scheduled maintenance has been completed.
Oct 18, 07:00 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 18, 00:00 EDT
Scheduled - Hello,

We will be performing routine OS patching and Updates this weekend on all of our Managed infrastructure and services in the US starting at midnight.

1-2 reboots of each managed device may be required.
Please note, these updates are being completed by our automated patching systems and Cartika engineers are watching the entire process to ensure all services are restored normally and to engage if any problems persist post reboot.

Thank you,
Cartika Team

Oct 17, 19:15 EDT

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Oct 12, 2026

No incidents reported.

Oct 11, 2026

Completed - The scheduled maintenance has been completed.
Oct 11, 07:00 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 11, 00:00 EDT
Scheduled - Hello,


We will be performing routine OS patching and Updates this weekend on all of our Managed infrastructure and services in Canada starting at midnight.

1-2 reboots of each managed device may be required.

Please note, these updates are being completed by our automated patching systems and Cartika engineers are watching the entire process to ensure all services are restored normally and to engage if any problems persist post reboot.


Thank you,
Cartika Team

Oct 10, 18:46 EDT

Oct 10, 2026

No incidents reported.

Oct 9, 2026

No incidents reported.

Oct 8, 2026

No incidents reported.