[BookMyName][Security] Emergency maintenance - BMN services unavailable

Resolved

Critical impact

Started

Lasted 18h 54m

View official incident ↗

Updates

  1. Resolved

    This incident has been resolved.

  2. Identified

    Update at 18:40 CEST The BookMyName website, its webmail, and the RDAP services are back up. The redirection service is still down: it requires further investigation before it can be patched and restored.

  3. Investigating

    Started: 21 Oct 2026, 15:50 CEST Status: Emergency maintenance in progress Impact: All BMN services are unavailable. The PHP project released today a fix for two critical  vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5 As a precaution, we have taken BMN services offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.