On October 20, 2026, two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed in PHP, a component utilized in our Developer Portal infrastructure. Rated as critical (CVSS 9.2), these vulnerabilities could theoretically allow an unauthenticated attacker to execute code remotely.
As a preventive measure to guarantee the absolute security of our developer ecosystem, we have suspended public access to the Developer Portal effective October 22, 2026, at 4:35 PM Europe/Vilnius.
Service Impact Assessment
What keeps working (No Impact)
- API Gateway Execution: The execution and operation of your integrated APIs are completely unaffected.
- Credentials & Auth: Your existing access tokens, API credentials, and already-registered applications remain fully secure and continue to function normally.
What is temporarily unavailable
Until further notice, administrative features on the front-end Developer Portal are offline. You will temporarily be unable to:
- Register new applications through the portal.
- Generate new API credentials.
- Update existing dev app configuration.
Why Access Was Suspended
To eliminate any security risks while we resolve these infrastructure challenges, we made the proactive decision to restrict all external access to the environment as a preventive safeguard.
Next Steps & Continuity Plan
We are working to minimize disruption to your developer experience:
- By Tuesday, October 27, 2026, at 3:00 PM Europe/Vilnius, we will send you a structured Service Continuity Plan detailing the next steps for your account and how to manage your integrations.
If you have any questions about these changes, please contact our technical support team at [email protected].
If you have urgent integration needs or require manual credential configurations in the meantime, please contact our support team.