Identified
Following the PHP security vulnerability announced on October 20 (php2shell), we have taken our OAuth authentication service offline as a precaution while we wait for the patched packages for our infrastructure. Until the service is restored, you can’t add new OAuth-based connections or re-authorize existing ones. Existing connections continue to run normally. This service is separate from the systems that store and process customer data, and we have no indication BlueConic has been targeted. No action is required from customers. We’ll update this page once the patch is applied.
Posted Oct 21, 2026 - 19:13 CEST
This incident affects: European Clusters (Cluster EU 1, Cluster EU 2, Cluster EU 3, Cluster EU 4, Cluster EU 6, Cluster EU 7, Cluster EU 8, Cluster EU 9, Cluster EU 10, Cluster EU 11, Cluster EU 12), US Clusters (Cluster US 1, Cluster US 2, Cluster US 3, Cluster US 4, Cluster US 5, Cluster US 8, Cluster US 10, Cluster US 11, Cluster US 12, Cluster US 14, Cluster US 16, Cluster US 17, Cluster US 18, Cluster US 19, Cluster US 20), Sandbox (Sandbox US 1, Sandbox US 2, Sandbox EU 1, Sandbox CA 1, Sandbox EU 2), APAC Clusters (Cluster APAC 1), Canadian Clusters (Cluster CA 1), and ADM (ADM instances).