Degraded Solr Indexing
Update - No new reports with solr issue but we are still monitoring the results of the implemented fix.
Oct 29, 2026 - 23:41 PDT
Monitoring - A fix has been implemented and we are monitoring the results.
Oct 29, 2026 - 21:16 PDT
Identified - The issue has been identified and a fix is being implemented.
Oct 29, 2026 - 19:52 PDT
Investigating - We are investigating Solr issue where indexing fails on a subset of sites. Our engineering team is investigating the cause and working toward a resolution. We will provide another update as more information becomes available.
Oct 29, 2026 - 17:36 PDT
Uptime over the past 90 days. View historical uptime.
Customer Sites Operational
Dashboard Operational
Global CDN Operational
Spinup Operations Operational
Workflow Operations Operational
Support Tickets Operational
Support Chat Operational
Terminus Operations Operational
Site Certificate Provisioning Operational
Billing Operations Operational
Autopilot Operational
Git Operational
Front-End Sites (Beta) Operational
Content Publisher (Public Preview) Operational
Solr Degraded Performance
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

System Metrics Month Week Day
Customer Site Availability
Fetching
Average Dashboard Load Time
Fetching

Oct 30, 2026

No incidents reported today.

Oct 29, 2026

Unresolved incident: Degraded Solr Indexing.

Oct 28, 2026

No incidents reported.

Oct 27, 2026

No incidents reported.

Oct 26, 2026

No incidents reported.

Oct 25, 2026

No incidents reported.

Oct 24, 2026

No incidents reported.

Oct 23, 2026

PHP Vulnerability CVE-2026-115560
Resolved - RESOLVED: PHP CVE-2026-115560 mitigation

Pantheon is aware of the release of CVE-2026-115560 from PHP.net; the recommended remediations for this vulnerability were already in place prior to the announcement. No action is required.
Oct 23, 10:35 PDT

Oct 22, 2026

Environment Creation and Multidev Failures
Resolved - The environment creation issue has been resolved. Creation of new Drupal and WordPress sites, test environments, and Multidev environments through the Dashboard and Terminus has returned to normal. Monitoring is complete, and environment creation is operating as expected.
Oct 22, 13:08 PDT
Monitoring - A fix has been implemented for the environment creation issue, and we are monitoring the results.

Customers should see creation of new Drupal and WordPress sites, test environments, and Multidev environments through the Dashboard and Terminus return to normal.
We are continuing to verify successful environment creation and will provide another update once monitoring is complete.
Oct 22, 10:25 PDT
Investigating - We are investigating an issue affecting environment creation.

Customers may be unable to create new Drupal or WordPress sites, test environments, or Multidev environments through the Dashboard or Terminus.

In some cases, an environment may appear in the environment list but return an error when accessed.
Engineering is investigating the underlying provisioning issue.

We will provide another update as more information becomes available.
Oct 22, 09:19 PDT
PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
Resolved - Overnight monitoring continues to show persistent but limited probing, which is being blocked. Our rollout of updated PHP images across customer environments including LTS versions was complete as of 5pm Pacific time yesterday. We will continue to observe and may provide further analysis of our findings, but we are closing this incident.
Oct 22, 09:36 PDT
Monitoring - We can now confirm that all pre-production customer environments are patched. Free/sandbox environments will be updated over the next 24-48 hours.

Over the course of today, our network-level mitigations have blocked over 60,000 suspicious requests probing the vulnerability, and remain in place.

This concludes our ongoing updates. We will share more analysis in the future based on what we can observe, but as of now, active mitigation work is complete.
Oct 21, 19:08 PDT
Update - Patched PHP builds have been deployed to all LTS environments, all environments in SFTP mode, and all live environments running PHP 8.2 or later. Most paid non-live environments running PHP 8.2 or later are also patched. We expect the remaining rollout to continue over the next 24 to 48 hours.
Oct 21, 18:42 PDT
Update - We have completed patching production environments for all sites running LTS versions of PHP.
Oct 21, 17:16 PDT
Update - Patched PHP builds are now available for all supported long-term support (LTS) PHP versions, and rollout to live environments running end-of-life PHP versions is underway. Live environments running fully supported PHP versions (8.2 and later) have already been patched.
Oct 21, 15:13 PDT
Update - We have received LTS updates from our upstream vendor and are working to deploy the patch to older versions of PHP.

We will post an update on that once it is complete or we have a clear ETA.
Our network-level mitigations remain effective and we see no evidence of compromise for any sites on the platform.
Oct 21, 14:32 PDT
Update - We have patched all live production sites running supported PHP versions (8.2 - 8.5).
Oct 21, 12:49 PDT
Update - We estimate the complete rollout for live environments on supported PHP versions (8.2 -> 8.5) within the next 20 minutes.

We are also prioritizing pre-production environments for paying customers, and have preemptively patched development or mutli-dev environments that were toggled into a mutable code state (“SFTP mode”).

We will provide an update on LTS versions of PHP (8.1.x through 5.6.x) once our upstream vendor has backported the patches and made updates available. That work has been in progress since 14:00 UTC.

Our network-level mitigations remain effective, and are blocking a low but slowly increasing level of activity which is probing the vulnerable surface area.
At this time we do not see evidence of widespread exploitation attempts, or any successful exploits.

We will continue to deliver patched versions of PHP as quickly as possible, and maintain network level mitigation and continuous monitoring to provide our customers and the wider PHP community insights into how this situation plays out
Oct 21, 12:30 PDT
Identified - Patching continues to roll out across the infrastructure in stages, with protective mitigations remaining active. We have not observed any volumetric exploit attempts, and no customer action is required.

We expect to provide an estimated completion time for the patching rollout within the next hour.
Oct 21, 11:22 PDT
Update - Patches continue rolling out across the infrastructure in stages, and protective mitigations remain active. We have not observed any volumetric exploit attempts, and no customer action is required.
Oct 21, 10:17 PDT
Update - Patching work is still in progress. Environments are being updated in stages, and protective mitigations remain active across the platform while the remaining updates complete.

We are not yet seeing evidence of any volumetric exploit attempts. No customer action is needed. We will provide further updates as the rollout progresses.
Oct 21, 09:07 PDT
Update - Updated PHP versions addressing CVE-2026-109618 and CVE-2026-109619 are now available, and we are beginning the process of rolling them out across our infrastructure.

No action is required from customers.

We will continue to update this post as the rollout progresses.
Oct 21, 07:36 PDT
Investigating - Pantheon is actively mitigating against the PHP security vulnerabilities announced at 14:00 UTC today. PHP environments are being patched to the following versions:

8.5.12
8.4.27
8.3.36
8.2.35

Additionally, we are patching the following heirloom PHP branches via our LTS vendor:

8.1.x
8.0.x
7.4.x
7.3.x
7.2.x
7.1.x
7.0.x
5.6.x

Finally, in preparation for this event, we pre-emptively deployed configuration changes to the runtime environment to mitigate potential attack vectors, and have implemented network-level mitigations to deflect attempted exploit payloads across the platform.

No action is required from customers, as all available versions of PHP on Pantheon receive security updates through our LTS vendor. However, we continue to recommend that customers running on older versions of PHP that have reached End of Sale update to a version fully supported by the PHP community in order to minimize their overall risk.

To pin your version of PHP to a different version, see https://docs.pantheon.io/guides/php/php-versions.

We will update this post as patching progresses and as we learn more about the vulnerability.
Oct 21, 07:03 PDT

Oct 21, 2026

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

Terminus Service Disruption
Resolved - This incident has been resolved.
Oct 17, 22:03 PDT
Monitoring - A fix has been implemented and we are monitoring the results.
Oct 17, 21:34 PDT
Identified - We have identified an issue affecting only Terminus workflows and commands, including Terminus authentication and API requests. Some Terminus requests may fail or time out.

Our Engineering team is working to restore Terminus service. There is currently no confirmed workaround or estimated time to resolution.

The Pantheon Dashboard and sites remain unaffected.

If you need immediate assistance, please open a chat with our Support bot and request an urgent Support ticket, or email helpdesk@pantheon.io for direct assistance.
Oct 17, 21:04 PDT

Oct 16, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage