Temporary service outage – precautionary measure

Incident Report for Pharius

Resolved

Pharius and Riskreporter are back online. The patch addressing the critical PHP vulnerabilities known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) has been applied successfully, and both applications are operating normally.
Posted Oct 21, 2026 - 22:56 CEST

Monitoring

Riskreporter is back online and we are monitoring the results.
Posted Oct 21, 2026 - 22:09 CEST

Update

A fix is being implemented, after which we will monitor the results. Our applications will be brought back online once we have confirmed the patch is effective.
Posted Oct 21, 2026 - 18:34 CEST

Identified

The issue has been identified and a patch is being worked on. The patch is expected 16.00 CEST.
Posted Oct 21, 2026 - 11:32 CEST

Investigating

We have been made aware of a security vulnerability that could affect our platform. As a precaution, we have decided to take Pharius / Riskreporter temporarily offline while we investigate and apply the necessary fixes.
Posted Oct 21, 2026 - 10:40 CEST
This incident affected: Pharius and RiskReporter.