Knak PHP security patch

Incident Report for Knak

Resolved

This incident has been resolved.
Posted Oct 21, 2026 - 15:05 EDT

Update

We are continuing to monitor for any further issues.
Posted Oct 21, 2026 - 12:03 EDT

Update

We are continuing to monitor for any further issues.
Posted Oct 21, 2026 - 11:59 EDT

Monitoring

A fix has been implemented and we are monitoring the results.
Posted Oct 21, 2026 - 11:45 EDT

Identified

The issue has been identified and a fix is being implemented.
Posted Oct 21, 2026 - 11:32 EDT

Update

We’ve applied the patch and are currently testing it before bringing Knak back online. Our preliminary investigation has shown no indication that Knak has been compromised. We’ll let you know as soon as Knak is back up.
Posted Oct 21, 2026 - 11:12 EDT

Update

We're actioning a patch.
Posted Oct 21, 2026 - 10:28 EDT

Update

We're actioning a patch
Posted Oct 21, 2026 - 10:27 EDT

Investigating

Our Engineering and Security teams are responding to PHP2SHELL, a recently disclosed vulnerability in widely used web software, including components Knak relies on. We are actively monitoring our systems and applying protective measures.

Protecting your data comes first. If we see a threat that needs further action, we may take Knak offline temporarily, possibly with little advance notice.

We know any disruption affects your team’s ability to build and launch campaigns. We apologize for the inconvenience and will post updates on our status page as they become available.
Posted Oct 21, 2026 - 09:28 EDT
This incident affected: Knak App and Knak Send.