We've completed applying the PHP security updates to Intellistack Streamline as of 2:23 PM ET.
Work on the other affected services is underway, and we'll post an update here as each is completed. Our Engineering and Security teams are continuing to monitor our environment closely. To date, we haven't identified any evidence that these vulnerabilities were exploited or that customer data was accessed. No action is required on your part.
Posted Oct 21, 2026 - 14:43 EDT
Identified
We're aware of the critical PHP vulnerabilities disclosed by the PHP project on October 21, 2026. Like much of the web, some of our services use PHP, and our Engineering and Security teams began working on this as soon as the advisory was announced. Here's where things stand:
- We're preparing to apply the security updates and have put additional protective measures in place in the meantime. - We're actively monitoring our environment, and to date we haven't identified any evidence that these vulnerabilities have been exploited or that customer data has been accessed. - No action is required on your part. - We don't expect service disruption.
If any maintenance is needed, we'll post it here in advance.
We'll share our next update here as things progress. Subscribe to this page to get updates as they're posted.
Posted Oct 21, 2026 - 11:49 EDT
This incident affects: Formstack Forms (Main Application), Formstack Documents (Website & Management Portal), Intellistack Streamline (Other), and FS ID - Login Auth and Admin Panel.