Softswitch Urgent Security Update

Scheduled Maintenance Report for Atheral

Completed

The scheduled maintenance has been completed.

Posted Oct 22, 2026 - 01:00 MDT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Oct 21, 2026 - 23:00 MDT

Scheduled

Two critical PHP zero-day vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), have been identified. These vulnerabilities could allow unauthorized remote code execution on affected servers.

Atheral will apply the necessary PHP updates to address these vulnerabilities

To ensure a smooth upgrade and minimize disruption, each node will temporarily respond to all INVITE and Registration requests with a SIP 503 message while that node is being upgraded, starting at 11 p.m. Mountain. This action will gracefully remove each node from our voice-switching cluster, and all voice traffic will automatically reroute through our other nodes during the software and security updates.

We expect each node to take ~15 minutes to update.

For additional technical details, please see https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities

In the meantime, for telephone number orders or E911 updates, please contact our support team at support@atheral.com or 702-470-6887.

Posted Oct 21, 2026 - 10:17 MDT

This scheduled maintenance affected: DEN Node (Softswitch Portal, SIP Service, Recording), IND Node (Softswitch Portal, SIP Service, Recording), SAT Node (Gateway, Softswitch Portal, Recording), and Endpoints Provisioning Server - provisionmyphone.net.