All Systems Operational
Customer Sites
Operational
Dashboard
Operational
Global CDN
Operational
Spinup Operations
Operational
Workflow Operations
Operational
Support Tickets
Operational
Support Chat
Operational
Terminus Operations
Operational
Site Certificate Provisioning
Operational
Billing Operations
Operational
Autopilot
Operational
Git
Operational
Front-End Sites (Beta)
Operational
Content Publisher (Public Preview)
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Customer Site Availability
Fetching
Average Dashboard Load Time
Fetching
Past Incidents
Oct 16, 2026
No incidents reported today.
Oct 15, 2026
Resolved -
Drupal Steward protection is in place for some known attack vectors related to CVE-2026-108097. This reduces exposure, but does not cover every possible exploit path or replace applying the security update. No customer impact is currently reported, and we continue to monitor.
Patched Drupal 10 and 11 releases are available through Integrated Composer, and Drupal 7.107 is available as an upstream update. Please update affected sites as soon as possible. If you cannot update immediately, uninstall the core Field UI module (field_ui) as a temporary mitigation.
See the Drupal core security update and Drupal 7.107 security update for details.
Oct 15, 16:11 PDT
Patched Drupal 10 and 11 releases are available through Integrated Composer, and Drupal 7.107 is available as an upstream update. Please update affected sites as soon as possible. If you cannot update immediately, uninstall the core Field UI module (field_ui) as a temporary mitigation.
See the Drupal core security update and Drupal 7.107 security update for details.
Oct 15, 16:11 PDT
Update -
Drupal 10 and 11 security updates are available through Integrated Composer, and the Drupal 7.107 upstream security update has been released. Release notes are available for both update paths: Drupal core security update and Drupal 7.107 security update.
Oct 15, 12:17 PDT
Oct 15, 12:17 PDT
Update -
Drupal 7.107 is now available as an upstream update.
Customers running Drupal 7 applications should update to Drupal 7.107 as soon as possible.
To apply the update, use the Drupal core update workflow in the Pantheon Dashboard.
Oct 14, 13:51 PDT
Customers running Drupal 7 applications should update to Drupal 7.107 as soon as possible.
To apply the update, use the Drupal core update workflow in the Pantheon Dashboard.
Oct 14, 13:51 PDT
Update -
We are aware of the Drupal 7 release and will update this incident when it is available as an upstream update.
Oct 14, 12:49 PDT
Oct 14, 12:49 PDT
Monitoring -
A Drupal core security release is now available for CVE-2026-108097 (risk 19/25). It fixes a critical remote code execution vulnerability in the Field UI module.
Drupal core alone is not directly exploitable, but several exploit paths exist through contributed modules, including at least one path that does not require authentication. Custom code can also expose the vulnerable functionality.
Update your Drupal sites to a patched release as soon as possible:
Drupal 11.4.10
Drupal 11.3.19
Drupal 10.6.19
Drupal 12.0.0-alpha1 through 12.0.0-beta1 are also affected. See the Drupal security advisory for Drupal 12 remediation details.
Drupal 11.2.x and earlier, Drupal 10.5.x and earlier, Drupal 9, and Drupal 8.9 are end-of-life. These versions are affected and do not receive security patches. Upgrade sites on these versions to a supported Drupal release.
To apply the update, use the Drupal core update workflow in the Pantheon Dashboard. See the Pantheon security release note for instructions.
If you cannot update immediately, uninstall the core Field UI module (
The Drupal Security Team states that this protects your site until you update.
As a founding Platform Partner of the Drupal Steward program, Pantheon provides protection against some known attack vectors. Drupal Steward does not cover all possible exploits, so it does not replace updating your site.
Oct 14, 10:52 PDT
Drupal core alone is not directly exploitable, but several exploit paths exist through contributed modules, including at least one path that does not require authentication. Custom code can also expose the vulnerable functionality.
Action required
Update your Drupal sites to a patched release as soon as possible:
Drupal 11.4.10
Drupal 11.3.19
Drupal 10.6.19
Drupal 12.0.0-alpha1 through 12.0.0-beta1 are also affected. See the Drupal security advisory for Drupal 12 remediation details.
Drupal 11.2.x and earlier, Drupal 10.5.x and earlier, Drupal 9, and Drupal 8.9 are end-of-life. These versions are affected and do not receive security patches. Upgrade sites on these versions to a supported Drupal release.
To apply the update, use the Drupal core update workflow in the Pantheon Dashboard. See the Pantheon security release note for instructions.
Mitigation until you update
If you cannot update immediately, uninstall the core Field UI module (
field_ui). The Drupal Security Team states that this protects your site until you update.
As a founding Platform Partner of the Drupal Steward program, Pantheon provides protection against some known attack vectors. Drupal Steward does not cover all possible exploits, so it does not replace updating your site.
Oct 14, 10:52 PDT
Oct 14, 2026
Oct 13, 2026
Completed -
The scheduled maintenance has been completed.
Oct 13, 19:00 PDT
Oct 13, 19:00 PDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 13, 18:00 PDT
Oct 13, 18:00 PDT
Scheduled -
As part of the upcoming 10/13 routine maintenance window, updates to two systems will result in limited service interruptions:
1. Site management workflow systems: We will update the systems that process deployments, database operations, and other site management workflows. These workflows will be temporarily interrupted, and jobs queued before the maintenance window may fail.
2. Next.js request-routing service: We will update the security settings for the service that routes requests to Next.js sites. Next.js sites may experience a brief interruption while this work is completed.
We recommend avoiding deployments and other site management workflows during the maintenance window. While we do not anticipate any impact to uptime for WordPress or Drupal sites during this maintenance window, Next.js sites may experience a brief interruption.
Oct 13, 18:00 PDT
1. Site management workflow systems: We will update the systems that process deployments, database operations, and other site management workflows. These workflows will be temporarily interrupted, and jobs queued before the maintenance window may fail.
2. Next.js request-routing service: We will update the security settings for the service that routes requests to Next.js sites. Next.js sites may experience a brief interruption while this work is completed.
We recommend avoiding deployments and other site management workflows during the maintenance window. While we do not anticipate any impact to uptime for WordPress or Drupal sites during this maintenance window, Next.js sites may experience a brief interruption.
Oct 13, 18:00 PDT
Resolved -
This incident has been resolved.
Oct 13, 18:01 PDT
Oct 13, 18:01 PDT
Identified -
The issue has been identified and a fix is being implemented.
Oct 13, 17:45 PDT
Oct 13, 17:45 PDT
Investigating -
We are investigating an issue causing workflow failures in the Pantheon Dashboard.
Our Engineering team is actively reviewing the issue and working to restore normal functionality. We will provide another update within 1–3 hours, or sooner if more information becomes available.
Oct 13, 16:48 PDT
Our Engineering team is actively reviewing the issue and working to restore normal functionality. We will provide another update within 1–3 hours, or sooner if more information becomes available.
Oct 13, 16:48 PDT
Oct 12, 2026
Resolved -
This incident has been resolved.
Oct 12, 17:58 PDT
Oct 12, 17:58 PDT
Update -
We are continuing to monitor for any further issues.
Oct 12, 14:58 PDT
Oct 12, 14:58 PDT
Monitoring -
The dashboard experienced a temporary increase in errors. The issue has been resolved, and the dashboard is loading normally again. We will continue monitoring to confirm the service remains stable.
Oct 12, 14:58 PDT
Oct 12, 14:58 PDT
Oct 11, 2026
No incidents reported.
Oct 10, 2026
No incidents reported.
Oct 9, 2026
No incidents reported.
Oct 8, 2026
No incidents reported.
Oct 7, 2026
Resolved -
This incident has been resolved.
Oct 7, 19:12 PDT
Oct 7, 19:12 PDT
Monitoring -
A fix has been implemented and we are monitoring the results.
Oct 7, 16:08 PDT
Oct 7, 16:08 PDT
Identified -
We have identified the cause of the 504 errors affecting the site. Service has been restored, and our verification confirms that uncached requests to the live site are returning successfully.
The issue was caused by an interruption of the database server supporting the site. The database has recovered, and our Engineering team is completing cleanup and validating the affected environment, including a previously unsuccessful database migration.
We are continuing to monitor the site and will provide another update as soon as more information becomes available. If you continue to experience issues, please contact helpdesk@pantheon.io.
Oct 7, 15:20 PDT
The issue was caused by an interruption of the database server supporting the site. The database has recovered, and our Engineering team is completing cleanup and validating the affected environment, including a previously unsuccessful database migration.
We are continuing to monitor the site and will provide another update as soon as more information becomes available. If you continue to experience issues, please contact helpdesk@pantheon.io.
Oct 7, 15:20 PDT
Investigating -
We are investigating reports that a subset of Pantheon-hosted sites are returning 504 Gateway Timeout errors due to a database server issue.
Customers may experience site timeouts or failed page loads, and database migrations for affected environments may also be impacted.
Our Engineering team is actively working to restore normal service and verify that affected database operations are completing successfully. Some affected sites have begun recovering, but intermittent errors may continue while the investigation remains ongoing.
We will post updates as soon as more information becomes available. If you need immediate assistance, please contact helpdesk@pantheon.io.
Oct 7, 13:54 PDT
Customers may experience site timeouts or failed page loads, and database migrations for affected environments may also be impacted.
Our Engineering team is actively working to restore normal service and verify that affected database operations are completing successfully. Some affected sites have begun recovering, but intermittent errors may continue while the investigation remains ongoing.
We will post updates as soon as more information becomes available. If you need immediate assistance, please contact helpdesk@pantheon.io.
Oct 7, 13:54 PDT
Oct 6, 2026
Resolved -
This incident has been resolved.
Oct 6, 15:21 PDT
Oct 6, 15:21 PDT
Update -
Remediation and platform hardening remain ongoing.
We are continuing to monitor systems closely while working directly with affected customers.
Oct 5, 11:08 PDT
We are continuing to monitor systems closely while working directly with affected customers.
Oct 5, 11:08 PDT
Update -
We are continuing to monitor and work through the remaining remediation and hardening. Our initial response is complete, and we are now working directly with the affected customers on site cleanup and credential rotation.
We have added further protections and monitoring to help prevent and detect this type of activity. Based on the information available to us, we have found no evidence that any other customer's site or data was accessed. We will share another update as the remaining work progresses.
As a reminder, the most effective protection is keeping your site current: please keep your CMS, plugins, themes, and modules up to date, remove anything you no longer use, review your user and credential access, and contact Pantheon Support if you notice unexpected code, deployments, or other changes on your site.
Oct 3, 09:29 PDT
We have added further protections and monitoring to help prevent and detect this type of activity. Based on the information available to us, we have found no evidence that any other customer's site or data was accessed. We will share another update as the remaining work progresses.
As a reminder, the most effective protection is keeping your site current: please keep your CMS, plugins, themes, and modules up to date, remove anything you no longer use, review your user and credential access, and contact Pantheon Support if you notice unexpected code, deployments, or other changes on your site.
Oct 3, 09:29 PDT
Update -
As our investigation has continued, we have determined that a small number of customer sites — not one — were affected.
In each case, the site was first compromised through a weakness in its own application, then used to interact with platform services. We are working directly with the affected customers on cleanup and credential rotation, and we have added platform controls to restrict this activity and detection to identify it going forward.
The activity remains limited to the individual affected sites and their own data. We have found no evidence that any other customer's site or data was accessed.
What you can do: Keeping your site current is the most effective protection.
Please update your CMS core, plugins, themes, and modules to the latest versions; remove plugins, themes, and modules you don't use; and delete sites you no longer need. If you notice unexpected code, deployments, or changes on your site, contact Pantheon Support.
We will continue to post updates here.
Oct 2, 08:05 PDT
In each case, the site was first compromised through a weakness in its own application, then used to interact with platform services. We are working directly with the affected customers on cleanup and credential rotation, and we have added platform controls to restrict this activity and detection to identify it going forward.
The activity remains limited to the individual affected sites and their own data. We have found no evidence that any other customer's site or data was accessed.
What you can do: Keeping your site current is the most effective protection.
Please update your CMS core, plugins, themes, and modules to the latest versions; remove plugins, themes, and modules you don't use; and delete sites you no longer need. If you notice unexpected code, deployments, or changes on your site, contact Pantheon Support.
We will continue to post updates here.
Oct 2, 08:05 PDT
Monitoring -
Beginning September 29, Pantheon identified malicious activity in which an attacker gained control of a customer website and used it to target platform resources.
Activity from the compromised site attempted to exploit a Linux kernel vulnerability (CVE-2026-53362) on platform application hosts, and some sites may have briefly experienced interruptions as a result.
We have taken the following actions:
- Disabled and deleted the affected site.
- Accelerated the operating-system and kernel updates already in progress, bringing application hosts to a version that addresses this vulnerability.
- Deployed additional platform protections and monitoring.
We have notified the affected customer directly. The compromise was limited to that single site; based on the information available to us, we have found no evidence of platform-wide data exfiltration or that this activity exposed data belonging to other customers.
We are continuing to review platform activity and will update this advisory if that changes.
How to protect your site:
Attackers most often gain control of a site through outdated or unmaintained code. Keeping your site current is the most effective protection. We strongly encourage all customers to keep CMS core, plugins, and themes fully updated, remove and delete sites and code you no longer use, and review user and credential access. If you notice unexpected code, deployments, or changes on your site, contact Pantheon Support.
We will post updates here as more information becomes available. If you have questions, please contact Pantheon Support.
Oct 1, 12:38 PDT
Activity from the compromised site attempted to exploit a Linux kernel vulnerability (CVE-2026-53362) on platform application hosts, and some sites may have briefly experienced interruptions as a result.
We have taken the following actions:
- Disabled and deleted the affected site.
- Accelerated the operating-system and kernel updates already in progress, bringing application hosts to a version that addresses this vulnerability.
- Deployed additional platform protections and monitoring.
We have notified the affected customer directly. The compromise was limited to that single site; based on the information available to us, we have found no evidence of platform-wide data exfiltration or that this activity exposed data belonging to other customers.
We are continuing to review platform activity and will update this advisory if that changes.
How to protect your site:
Attackers most often gain control of a site through outdated or unmaintained code. Keeping your site current is the most effective protection. We strongly encourage all customers to keep CMS core, plugins, and themes fully updated, remove and delete sites and code you no longer use, and review user and credential access. If you notice unexpected code, deployments, or changes on your site, contact Pantheon Support.
We will post updates here as more information becomes available. If you have questions, please contact Pantheon Support.
Oct 1, 12:38 PDT
Oct 5, 2026
Oct 4, 2026
No incidents reported.
Oct 3, 2026
Oct 2, 2026
Resolved -
This incident on Pantheon Dashboard and workspace operations has been resolved.
Oct 2, 19:19 PDT
Oct 2, 19:19 PDT
Update -
We are continuing to monitor for any further issues.
Oct 2, 17:08 PDT
Oct 2, 17:08 PDT
Monitoring -
A fix has been implemented and we are monitoring the results.
Oct 2, 17:07 PDT
Oct 2, 17:07 PDT
Update -
We are continuing to investigate this issue.
Oct 2, 12:55 PDT
Oct 2, 12:55 PDT
Investigating -
We are investigating an issue causing intermittent errors in the Pantheon Dashboard and some workspace operations. Customers may experience failed page loads or intermittent authorization errors when accessing the Dashboard or managing workspace resources.
Our Engineering team is actively reviewing the issue and working to restore normal functionality. We will provide another update within 1–3 hours, or sooner if more information becomes available.
If you are unable to access the Dashboard and need urgent assistance, please contact helpdesk@pantheon.io.
Oct 2, 09:30 PDT
Our Engineering team is actively reviewing the issue and working to restore normal functionality. We will provide another update within 1–3 hours, or sooner if more information becomes available.
If you are unable to access the Dashboard and need urgent assistance, please contact helpdesk@pantheon.io.
Oct 2, 09:30 PDT