We are continuing to investigate this issue.
We are providing an update on the disruption affecting the Middle East (UAE) (me-central-1) Region. After a thorough assessment, we have determined that we are unable to restore access to the resources and data hosted exclusively in the mec1-az2 Availability Zone. We continue to work on recovering regional resources, as well as zonal resources hosted in the other affected Availability Zones (mec1-az1 and mec1-az3). Since the disruption began in March, most customers have been able to re-establish their operations in other Regions by restoring backups or copying data that remained accessible. AWS Support remains available to help customers who need assistance moving their applications to alternate Regions. We remain committed to supporting our customers in the UAE. We are working on replacing the affected infrastructure and will provide an update on the restoration of our services in the coming months. We have notified the relevant authorities and continue to work with them toward that goal.
A fix has been implemented and we are monitoring the results.
Kaseya is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. CVE-2026-109618 involves a remote code execution vulnerability where handling out-of-memory errors via longjmp() leaves request memory uninitialized due to improper control flow management, potentially allowing attackers to achieve remote code execution using out-of-memory (OOM) triggers. CVE-2026-109619 describes a remote code execution vulnerability where longjmp() fatal error handling leaves global memory pointing to freed memory regions. These regions can later be accessed during subsequent requests, potentially enabling arbitrary code execution. Kaseya has completed an evaluation of its product portfolio regarding these vulnerabilities. A summary of the current status across impacted products and services is provided in the table below. As our investigation and remediation efforts continue, we will keep the following list updated with the latest information. Here is what each status means: Fully Patched: The fix has been applied. Compensating Controls: We have put controls in place to reduce exposure and potential impact while we work on remediation. Unaffected: The product is not affected by these vulnerabilities. Product Status: AudIT - Unaffected Autotask PSA - Fully Patched Datto Backup for Azure Files + Blob Storage - Unaffected BMS/Vorex - Fully patched ConnectBooster - Unaffected Datto Backup For Azure - Unaffected Datto BCDR - Compensating Controls Datto Direct to Cloud Products - Compensating Controls Datto EDR - Unaffected Datto Networking - Compensating Controls Datto Partner Portal - Compensating Controls Datto RMM - Fully Patched Datto SaaS Defense - Unaffected Datto SaaS Protection + Backupify - Compensating Controls Datto Workplace + File Protect - Fully Patched Endpoint Backup V2 - Fully Patched Graphus - Unaffected ID Agent - Fully Patched Inky - Unaffected IT Glue - Unaffected Kaseya One - Unaffected Kaseya Quote Manager - Fully Patched Kaseya MDM - Unaffected Microsoft Entra Backup - Unaffected MyITProcess - Unaffected Passly - Unaffected RapidFire Tools - Fully Patched RocketCyber - Fully Patched SaaS Alerts -Unaffected Secure Payments - Fully Patched Spanning - Fully Patched Unitrends - Fully Patched UniView - Unaffected vPenTest - Fully Patched VSA 10 On Prem - Unaffected VSA 10 Cloud - Fully Patched VSA 9 On Prem - Unaffected VSA 9 Cloud - Fully Patched Please note that Unitrends customers will need to take an additional action as outlined in our Knowledgebase: https://help.unitrends.kaseya.com/help/Content/Satori/release-notes/release-notes-11-2-0-3.htm We will continue to provide updates as additional information becomes available. For additional questions, please create a ticket with our Support team here: https://helpdesk.kaseya.com/hc/en-gb#/contact Changelog Last Update: 11/12/2026 - Spanning - Moved from Compensating Controls to Fully Patched
All enhancements and bug fixes planned to take effect Tuesday, November 3rd, 2026, at 9 AM EST.Questions? Please create a case in Salesforce Community or reach out to MySupport@dosespot.com ...
The FAA ground stop affecting flights across the United States on November 13 has been lifted. Travelers may continue to experience delays, cancellations, and limited rebooking options as airlines recover and demand remains high. If your travel is disrupted, you can book accommodations directly in the Navan app. Our support team is also available to help with rebooking and finding accommodations, though wait times may be longer than usual due to high demand. Thank you for your patience as we support affected travelers.
Microsoft continues to work toward full resolution of the Microsoft 365 service outage. Errors have greatly reduced but some backups and restores may still fail intermittently. Our team will continue to monitor through the weekend and share updates as needed.
Monitors
Cloudflare
PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619): Kaseya status - Investigation and Remediation
Kaseya
DoseSpot