ternair.com and Ternair Help Center has been patched, validated and is back online.
The Ternair Campaign platform (customer portal and applications) was never affected and has remained available throughout.
Posted Oct 22, 2026 - 08:35 CEST
Update
Quezy has been patched, validated and is back online.
Work on ternair.com and the Ternair Help Center is ongoing; we will bring them back as soon as patching and validation are complete.
Posted Oct 21, 2026 - 21:15 CEST
Update
The PHP security release addressing CVE-2026-109618 and CVE-2026-109619 is now available (PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35). We are applying the update to our affected environments.
We are now patching, validating and progressively bringing ternair.com, the Ternair Help Center and Quezy back online.
The Ternair Campaign platform (customer portal and applications) was never affected.
Posted Oct 21, 2026 - 19:21 CEST
Identified
The Ternair SaaS platform (customer portal and applications), where all customer data resides, runs on entirely separate infrastructure that does not use PHP. It is not affected by these vulnerabilities and remains fully available.
The official PHP security release is expected today at 16:00 CEST. We will patch and validate immediately afterwards and expect the websites to be back online the same day.
Posted Oct 21, 2026 - 14:18 CEST
Investigating
Following the disclosure of two critical remote code execution vulnerabilities in PHP, we have taken our public websites offline as a precaution: ternair.com, the Ternair Help Center and Quezy.
The Ternair portal and customer applications do not use the affected components and remain fully available. There is no indication of any compromise; this is a preventive measure.
We are working with our hosting and website partners to verify and patch the affected systems. We expect the websites to be back online within a few hours and will post an update as soon as we know more.