Multiple shipping partners offline because of PHP vulnerability

Incident Report for Returnless

Resolved

This incident has been resolved.
Posted Oct 22, 2026 - 15:10 CEST

Investigating

The PHP vulnerability that has been discovered affects multiple of our shipping partners. This limits our ability to create shippings, get shipping labels and receive shipping statuses.
Posted Oct 21, 2026 - 14:02 CEST
This incident affected: Shipping integrations (PostNL, PostNL (Belgium), QLS) and Platform integrations (QLS).