Active Incident

Updated a few seconds ago

PHP Vulnerabilities - Mitigated and PatchedSecurity Issue

Incident Status

Security Issue

Components

BLOX CMS, BLOX VMS, Rayos CMS

Locations

US-EAST-1, US-MIDWEST-1, US-CLOUD-1


October 22, 2026 10:26AM CDT
October 22, 2026 3:26PM UTC
MONITORING

On Tuesday, October 20, the PHP Group disclosed two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Details are in the PHP announcement: https://www.php.net/archive/2026.php#2026-10-21-5 We moved quickly to protect our customers. At 9:00 PM CDT on Tuesday, we applied mitigations across our BLOX, Rayos, and VMS platforms. We also added monitoring and detection rules to identify attempts to exploit these vulnerabilities. The PHP Group released official fixes at 9:00 AM CDT on Wednesday, October 21, and our systems team then deployed those fixes to BLOX, Rayos, and VMS. Based on our review, we have found no evidence of exploitation attempts on our platforms before the mitigations were in place. We will continue to monitor the situation and will share updates if anything changes. No action is required on your part. If you have questions, please contact our support team.
Network interruption in us-east-1Partial Service Disruption

Incident Status

Partial Service Disruption

Components

Network

Locations

US-EAST-1


October 20, 2026 4:47PM CDT
October 20, 2026 9:47PM UTC
MONITORING

At 4:00PM CDT, our us-east-1 facility experienced a network interruption due to an upstream carrier outage. While this typically re-routes within a couple of seconds, some users may have experienced an outage of a couple of minutes or more during the re-route. At this time, all services should be back up and active. We'll continue to monitor the situation and close out the advisory once the upstream issue is resolved.

October 21, 2026 11:53AM CDT
October 21, 2026 4:53PM UTC
RESOLVED

Our upstream provider has confirmed that the issue is resolved.

October 22, 2026 6:08AM CDT
October 22, 2026 11:08AM UTC
MONITORING

The same internet circuit in our us-east-1 experienced another fault at around 5:45AM CDT. This may have caused another interruption around that time for some users. We have opted to disable the circuit to prevent further interruptions until we get confirmation from our vendor that services are stable.
Fotomoto Photo Sales Service RetirementOperational

Incident Status

Operational

Components

BLOX CMS

Locations

US-EAST-1, US-MIDWEST-1


October 19, 2026 1:18PM CDT
October 19, 2026 6:18PM UTC
MONITORING

Fotomoto is retiring its photo sales service on October 21, 2026. After that date, photo sales buttons powered by Fotomoto will no longer work on websites. So your readers don’t run into broken buttons, we will turn off Fotomoto photo sales buttons on all sites that currently use them. You don’t need to do anything. If you’d like to remove the buttons sooner, you can clear the Fotomoto ID in Page Customizations anytime. We are looking at replacement photo sales options and will share updates as soon as we have them. If you have open orders or an active Fotomoto subscription, Bay Photo’s support team can best answer questions about those: https://support.bayphoto.com/hc/en-us/articles/56447676086163-A-New-Chapter-for-Your-Prints For anything related to your BLOX site, our customer support team is glad to help you through the transition.
AP Media API key rotationOperational

Incident Status

Operational

Components

BLOX CMS

Locations

US-EAST-1, US-MIDWEST-1


October 8, 2026 3:57PM CDT
October 8, 2026 8:57PM UTC
MONITORING

The Associated Press is notifying its customers it is rotating customer AP Media API keys. Please follow the instructions in any communications you receive from the Associated Press. Once you have obtained a new key from AP, go to Editorial > Syndication in legacy BLOX, and click on the gear icon at top right to access your Syndication Channels. Double click to open your AP channel, and update the API key. You may wish to note your existing key prior to updating it, in case you need to revert for any reason during the transition window AP has provided. You will need to update your AP Media API key in BLOX CMS no later than October 21, per the AP's guidance.

October 21, 2026 11:50AM CDT
October 21, 2026 4:50PM UTC
MONITORING

Reminder: Update Associated Press Media API Key The Associated Press is notifying its customers it is rotating customer AP Media API keys. Please follow the instructions in any communications you receive from the Associated Press. Once you have obtained a new key from AP, go to Editorial > Syndication in legacy BLOX, and click on the gear icon at top right to access your Syndication Channels. Double click to open your AP channel, and update the API key. AP has communicated old keys will stop working on October 22.

BLOX CMS




Security Issue

Job Processing




Operational

BLOX Total CMS




Operational

BLOX NXT




Operational

Network




Partial Service Disruption

Database




Operational

Storage System




Operational

Support Call Center




Operational

BLOX VMS




Security Issue

Rayos CMS




Security Issue

FTP, Drive, DNS, E-Mail




Operational

E-Editions




Operational

Advertising & Behavioral Targeting




Operational

Business Directory




Operational

Forms




Operational

Subscription




Operational

Analytics & Email Reach




Operational

Calendar




Operational

BLOX CMS /APP




Operational

Sandstone Administration




Operational

OTT & NOW App




Operational

Data Insights




Operational

History (Last 7 days)

BLOX-CMS 1.96.3 release at 11AM centralPartial Service Disruption

Incident Status

Partial Service Disruption


Components

BLOX CMS


Locations

US-EAST-1, US-MIDWEST-1



October 20, 2026 10:44AM CDT
October 20, 2026 3:44PM UTC
INVESTIGATING

BLOX-CMS 1.96.3 will be released at 11AM central to deploy SAML changes that were made to the BLOX frontend login experience. The changes allow for more customization of the SAML configuration to better handle customer configurations.

October 20, 2026 6:54PM CDT
October 20, 2026 11:54PM UTC
RESOLVED

This was released without issue
BLOX Subscription 1.71.1 release at 3:00 PM Central TimePartial Service Disruption

Incident Status

Partial Service Disruption


Components

Subscription


Locations

US-EAST-1, US-MIDWEST-1



October 8, 2026 2:20PM CDT
October 8, 2026 7:20PM UTC
MONITORING

BLOX Subscription 1.71.1 will be released at 3:00 PM Central Time. In this release the renewal processing logic has been updated to improve the handling of delayed transactions with PayPal and prevent additional renewal attempts while an existing payment is pending.

October 12, 2026 8:12AM CDT
October 12, 2026 1:12PM UTC
MONITORING

Software released without incidents.

October 19, 2026 1:13PM CDT
October 19, 2026 6:13PM UTC
RESOLVED

This was released without issue.