Investigating - The Liferay Cloud Infrastructure team is performing emergency maintenance across our Kubernetes clusters. This action is being taken to patch a critical vulnerability identified as CVE-2026-98432.
Reason for Emergency Action: Due to the high criticality of this vulnerability and confirmation of its exploitability by Google-GCP, InfoSec has mandated an immediate rollout today, bypassing our standard two-week notice. This rapid response is necessary to mitigate the risk of exploitation and secure all environments as quickly as possible.
Technical Details & Risk: The vulnerability (CVE-2026-98432) on GKE can lead to a kernel panic or a container escape, resulting in privilege escalation and Remote Code Execution (RCE). It can be exploited locally by unprivileged processes with no requirements for capabilities, and potentially remotely via vulnerability chaining.
Actions Taken:
- All affected GKE clusters are being updated to apply the necessary security patch.
- No action is required on your end. Liferay will execute and manage the entire maintenance procedure.
Security Commitment: Protecting our customers’ data and infrastructure is our top priority. We thank you for your understanding regarding the lack of prior notice and any disruptions caused by this exceptional and necessary circumstance.
Nov 12, 2026 - 15:29 PST
Reason for Emergency Action: Due to the high criticality of this vulnerability and confirmation of its exploitability by Google-GCP, InfoSec has mandated an immediate rollout today, bypassing our standard two-week notice. This rapid response is necessary to mitigate the risk of exploitation and secure all environments as quickly as possible.
Technical Details & Risk: The vulnerability (CVE-2026-98432) on GKE can lead to a kernel panic or a container escape, resulting in privilege escalation and Remote Code Execution (RCE). It can be exploited locally by unprivileged processes with no requirements for capabilities, and potentially remotely via vulnerability chaining.
Actions Taken:
- All affected GKE clusters are being updated to apply the necessary security patch.
- No action is required on your end. Liferay will execute and manage the entire maintenance procedure.
Security Commitment: Protecting our customers’ data and infrastructure is our top priority. We thank you for your understanding regarding the lack of prior notice and any disruptions caused by this exceptional and necessary circumstance.
Nov 12, 2026 - 15:29 PST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 12, 2026 - 08:00 PST
Nov 12, 2026 - 08:00 PST
Scheduled - We will roll out an update for the Backup and Database service container images across customer environments.
The minimum supported versions will be updated to:
- Backup Service: liferaycloud/backup:5.41.0
- Database Service: liferaycloud/database:5.17.3
Execution Details & Customer Impact:
- A restart of the Backup and Database services will occur to load and apply the new image versions.
- No customer action is required.
Actions and Exceptions:
- If you have any questions or experience any unexpected behavior following this maintenance, please open a ticket through the [Liferay Customer Portal] (https://support.liferay.com).
Nov 12, 2026 08:00-20:00 PST
The minimum supported versions will be updated to:
- Backup Service: liferaycloud/backup:5.41.0
- Database Service: liferaycloud/database:5.17.3
Execution Details & Customer Impact:
- A restart of the Backup and Database services will occur to load and apply the new image versions.
- No customer action is required.
Actions and Exceptions:
- If you have any questions or experience any unexpected behavior following this maintenance, please open a ticket through the [Liferay Customer Portal] (https://support.liferay.com).
Nov 12, 2026 08:00-20:00 PST
Infrastructure Services
Operational
Database Services
Under Maintenance
Storage Services
Operational
Monitoring and Logging Services
Operational
Networking Services
Operational
Liferay Cloud Console
Operational
Liferay Cloud API
Operational
Liferay Cloud Platform Regions
Under Maintenance
Tokyo, Japan
Under Maintenance
Osaka, Japan
Under Maintenance
Mumbai, India
Under Maintenance
Sydney, Australia
Under Maintenance
Hamina, Finland
Under Maintenance
London, England
Under Maintenance
Frankfurt, Germany
Under Maintenance
Montréal, Canada
Under Maintenance
São Paulo, Brazil
Under Maintenance
Iowa, USA
Under Maintenance
Virginia, USA
Under Maintenance
Oregon, USA
Under Maintenance
Jurong West, Singapore
Under Maintenance
Dammam, Saudi Arabia
Under Maintenance
Doha, Qatar
Under Maintenance
Zurich, Switzerland
Under Maintenance
Delhi, India
Under Maintenance
Liferay Experience Cloud Regions
Operational
Europe (EU)
Operational
North America (United States)
Operational
Latin America (Brazil)
Operational
Liferay Systems
Operational
customer.liferay.com
Operational
releases.liferay.com
Operational
support.liferay.com
Operational
Analytics Cloud Website - analytics.liferay.com
Operational
Analytics Cloud Regions
Operational
Sao Paulo, Brazil
Operational
London, England
Operational
Frankfurt, Germany
Operational
Oregon, United States
Operational
Mumbai, India
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance