Identified - What happened
On 20 October 2026, Oracle has released an October 2026 Critical Patch Update (https://blogs.oracle.com/security/october-2026-critical-patch-update-released) that includes multiple fixes for Java versions that are in use by Mendix apps.
Who is affected
All customers with applications running on Mendix Cloud.
What we did
We have updated the Java version for Java 25 and Java 21. These new versions include the critical patch updates.
We're working on updating the other Java versions used on Mendix Cloud (Java 11, Java 17). For these Java versions, we're waiting for an update from our vendors. Once these updates are available, we will update the Java versions used on Mendix Cloud.
What you need to do
If your app is running on Java 21 or Java 25, you should redeploy your app. You can find the Java version used for your environment on the Environment Details page (https://docs.mendix.com/developerportal/deploy/environments-details/#application-status). You can redeploy the same package that is already running on your environment, or build and deploy a new package. A restart is not enough!
We recommend doing this in your usual order, so you can check that your applications still work before updating production:
1. Test environment
2. Acceptance environment
3. Production environment
If your app is running on Java 11 or Java 17, you should keep an eye on this Statuspage incident. We will update this when we release new Java versions on Mendix Cloud. These updates will include instructions for the specific Java versions.
Deployment requirements
To apply these security fixes, you must perform a regular deployment (non-Zero Downtime Deployment). Zero Downtime Deployment (ZDT) will not apply these security fixes, even when redeploying an existing deployment package. You do not need to create a new deployment package. You can redeploy your existing package using the regular deployment process. If you have already performed a Zero Downtime Deployment to apply these fixes, please redeploy using the regular deployment process. A regular deployment causes a short period of downtime while the application restarts, so please plan accordingly.
If you have any questions, feel free to contact support.
Oct 23, 2026 - 13:22 UTC
On 20 October 2026, Oracle has released an October 2026 Critical Patch Update (https://blogs.oracle.com/security/october-2026-critical-patch-update-released) that includes multiple fixes for Java versions that are in use by Mendix apps.
Who is affected
All customers with applications running on Mendix Cloud.
What we did
We have updated the Java version for Java 25 and Java 21. These new versions include the critical patch updates.
We're working on updating the other Java versions used on Mendix Cloud (Java 11, Java 17). For these Java versions, we're waiting for an update from our vendors. Once these updates are available, we will update the Java versions used on Mendix Cloud.
What you need to do
If your app is running on Java 21 or Java 25, you should redeploy your app. You can find the Java version used for your environment on the Environment Details page (https://docs.mendix.com/developerportal/deploy/environments-details/#application-status). You can redeploy the same package that is already running on your environment, or build and deploy a new package. A restart is not enough!
We recommend doing this in your usual order, so you can check that your applications still work before updating production:
1. Test environment
2. Acceptance environment
3. Production environment
If your app is running on Java 11 or Java 17, you should keep an eye on this Statuspage incident. We will update this when we release new Java versions on Mendix Cloud. These updates will include instructions for the specific Java versions.
Deployment requirements
To apply these security fixes, you must perform a regular deployment (non-Zero Downtime Deployment). Zero Downtime Deployment (ZDT) will not apply these security fixes, even when redeploying an existing deployment package. You do not need to create a new deployment package. You can redeploy your existing package using the regular deployment process. If you have already performed a Zero Downtime Deployment to apply these fixes, please redeploy using the regular deployment process. A regular deployment causes a short period of downtime while the application restarts, so please plan accordingly.
If you have any questions, feel free to contact support.
Oct 23, 2026 - 13:22 UTC
Monitoring - What happened
A certificate authority called eMudhra generated the cryptographic keys for eight of its intermediate certificates incorrectly, that caused the certificates to become compromised. Java, which Mendix apps run on, trusted these certificates by default. Someone able to intercept an app's outgoing connection could pose as the server it was calling.
Who is affected
Only the outgoing connections your app makes over HTTPS, for example REST or web service calls, or other integrations with external systems. Traffic coming in to your app, such as users opening it in a browser, is not affected.
What we did
We have updated the Mendix Cloud build process so that apps built from now on no longer trust the compromised certificates. We have also updated the underlying OS base image. This was released on 22 Oct at 17:30 UTC.
What you need to do
The fix is added when your app is deployed, so apps that are already running only get it when you redeploy. You can redeploy the same package that is already running on your environment, or build and deploy a new package. A restart is not enough!
If your app makes outgoing calls to other systems, please redeploy it. We recommend doing this in your usual order, so you can check that your integrations still work before production:
1. Test environment
2. Acceptance environment
3. Production environment
If your app does not make outgoing calls, no action is needed. It will receive the update at its next regular deployment.
Deployment requirements
To apply these security fixes, you must perform a regular deployment (non-Zero Downtime Deployment). Zero Downtime Deployment (ZDT) will not apply these security fixes, even when redeploying an existing deployment package. You do not need to create a new deployment package. You can redeploy your existing package using the regular deployment process. If you have already performed a Zero Downtime Deployment to apply these fixes, please redeploy using the regular deployment process. A regular deployment causes a short period of downtime while the application restarts, so please plan accordingly.
What to expect after redeploying
If one of the systems your app calls uses a certificate issued by one of the affected eMudhra authorities, the connection will now fail. In that case, ask the owner of that system to replace its certificate.
If you have any questions, feel free to contact support.
Oct 22, 2026 - 18:59 UTC
A certificate authority called eMudhra generated the cryptographic keys for eight of its intermediate certificates incorrectly, that caused the certificates to become compromised. Java, which Mendix apps run on, trusted these certificates by default. Someone able to intercept an app's outgoing connection could pose as the server it was calling.
Who is affected
Only the outgoing connections your app makes over HTTPS, for example REST or web service calls, or other integrations with external systems. Traffic coming in to your app, such as users opening it in a browser, is not affected.
What we did
We have updated the Mendix Cloud build process so that apps built from now on no longer trust the compromised certificates. We have also updated the underlying OS base image. This was released on 22 Oct at 17:30 UTC.
What you need to do
The fix is added when your app is deployed, so apps that are already running only get it when you redeploy. You can redeploy the same package that is already running on your environment, or build and deploy a new package. A restart is not enough!
If your app makes outgoing calls to other systems, please redeploy it. We recommend doing this in your usual order, so you can check that your integrations still work before production:
1. Test environment
2. Acceptance environment
3. Production environment
If your app does not make outgoing calls, no action is needed. It will receive the update at its next regular deployment.
Deployment requirements
To apply these security fixes, you must perform a regular deployment (non-Zero Downtime Deployment). Zero Downtime Deployment (ZDT) will not apply these security fixes, even when redeploying an existing deployment package. You do not need to create a new deployment package. You can redeploy your existing package using the regular deployment process. If you have already performed a Zero Downtime Deployment to apply these fixes, please redeploy using the regular deployment process. A regular deployment causes a short period of downtime while the application restarts, so please plan accordingly.
What to expect after redeploying
If one of the systems your app calls uses a certificate issued by one of the affected eMudhra authorities, the connection will now fail. In that case, ask the owner of that system to replace its certificate.
If you have any questions, feel free to contact support.
Oct 22, 2026 - 18:59 UTC
Mendix Services
Operational
Project Management
Operational
Control Center
Operational
Identity and Access Management
Operational
Team Server
Operational
Studio Pro
Operational
Marketplace
Operational
Community
Operational
Academy
Operational
Documentation
Operational
Support Portal
Operational
Native Mobile Builder
Operational
APIs
Operational
Licensing Service
Operational
Software Composition
Operational
Self-service
Operational
Model Server
Operational
Pipeline Portal
Operational
Webhooks
Operational
Mendix Cloud: GenAI Resource Packs Portal
Operational
Workstation Management
Operational
Approval Requests
Operational
Mendix Cloud Regions
Operational
Mendix Cloud US-East
Operational
Mendix Cloud EU (Frankfurt)
Operational
Mendix Cloud Asia Pacific (Tokyo)
Operational
Mendix Cloud Free Tier EU
Operational
Mendix Cloud UK
Operational
Mendix Cloud IE
Operational
Mendix Cloud US-West
Operational
Mendix Cloud Asia Pacific (Sydney)
Operational
Mendix Cloud Canada (Central)
Operational
Mendix Cloud Asia Pacific (Singapore)
Operational
Mendix Cloud Asia Pacific (Mumbai)
Operational
Mendix Cloud Africa (Cape Town)
Operational
Mendix Cloud South America (São Paulo)
Operational
Mendix Cloud EU (Frankfurt 2)
Operational
Mendix Cloud Asia Pacific (Osaka)
Operational
Mendix Cloud Asia Pacific (Seoul)
Operational
Mendix Cloud Asia Pacific (Jakarta)
Operational
Mendix Cloud EU (Frankfurt): GenAI Resources
Operational
Mendix Cloud Canada (Central): GenAI Resources
Operational
Mendix Cloud Dedicated Regions
Operational
Mendix Cloud Dedicated US-West Echo
Operational
Mendix Cloud Dedicated UK Echo
Operational
Mendix Cloud Dedicated Asia Pacific (Singapore) Echo
Operational
Mendix Cloud Dedicated US-East Hotel
Operational
Mendix Cloud Dedicated US-East Mike
Operational
Mendix Cloud Dedicated US-East Papa
Operational
Mendix Cloud Dedicated EU (Frankfurt) Sierra
Operational
Mendix Cloud Dedicated EU (Frankfurt) Uniform
Operational
Mendix Cloud Dedicated Asia Pacific (Singapore) Able
Operational
Mendix Cloud Dedicated US-East Kilo
Operational
Mendix Cloud Dedicated US-East Charlie
Operational
Mendix Cloud Dedicated US-East Colin
Operational
Mendix Cloud Dedicated EU (Frankfurt) Metro
Operational
Mendix Cloud Deployment
Operational
Mendix Cloud Deployment
Operational
Logging, Monitoring, and Alerting
Operational
Backups
Operational
PDF Document Generation
Operational
Cloud Foundry Buildpack
Operational
Mendix Event Broker
Operational
Custom domains
Operational
Partner Cloud Deployments
Operational
Partner Cloud Deployment SAP Cloud
Operational
Partner Cloud Deployment Stack-IT Cloud
Operational
Mendix on Third Party Clouds
Operational
Mendix on Kubernetes
Operational
Mendix on Azure
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Scheduled Maintenance
Scheduled Platform Maintenance Oct 25, 2026 09:00-13:00 UTC
We will perform updates on our platform applications. During the maintenance window, you may not be able to sign in to Mendix Portal or Studio Pro. Parts of the Mendix Portal may not be available. Public APIs, administration of API credentials and security settings may also be temporarily unavailable.
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 14, 2026 - 07:03 UTC
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 14, 2026 - 07:03 UTC
Mendix Cloud Platform Maintenance - Wave 5 Oct 26, 2026 08:00-16:00 UTC
Maintenance is scheduled for the application infrastructure of Mendix Cloud. The maintenance will improve the security and stability of the Mendix Cloud platform. This upgrade is executed on a platform level, which means there is no flexibility in the time period, but you can move your app early yourself (see below). An 8-hour maintenance window is planned.
Start: Monday, Oct 26th, 2026, 08:00 UTC
End: Monday, Oct 26th, 2026, 16:00 UTC
Impact on Mendix apps
During the maintenance, the Runtime Engines (application instances) of your Mendix applications will be restarted and redeployed to the updated application infrastructure. This is executed automatically in no specific order. To ensure continuous availability for all customer applications, the underlying infrastructure upgrades will be performed in a rolling fashion. This means the rolling upgrade process ensures no downtime for both multi-instance applications (by restarting only one Runtime Engine at a time) and single-instance applications.
While the rolling nature of these upgrades is designed to minimize impact, a small number of users might experience brief, intermittent networking disruptions or 502 errors as underlying services are rotated. These are typically temporary and self-correcting.
Moving early
If the scheduled maintenance window is inconvenient for your application, you may opt to move to the updated infrastructure ahead of time. The updated application infrastructure will be available starting Thursday, Oct 22nd, 2026, 12:00 UTC.
Any application that is (re)deployed or restarted after this time will be scheduled on the updated infrastructure and will not be restarted again during the maintenance window. This allows you to control the timing of the restart and avoid impact during business-critical hours.
Please note that, even when moving early, a small number of users may still experience brief, intermittent 502 errors during the scheduled maintenance window due to the rotation of underlying platform services. These events are expected to be temporary and self-correcting.
Posted on Sep 28, 2026 - 17:26 UTC
Start: Monday, Oct 26th, 2026, 08:00 UTC
End: Monday, Oct 26th, 2026, 16:00 UTC
Impact on Mendix apps
During the maintenance, the Runtime Engines (application instances) of your Mendix applications will be restarted and redeployed to the updated application infrastructure. This is executed automatically in no specific order. To ensure continuous availability for all customer applications, the underlying infrastructure upgrades will be performed in a rolling fashion. This means the rolling upgrade process ensures no downtime for both multi-instance applications (by restarting only one Runtime Engine at a time) and single-instance applications.
While the rolling nature of these upgrades is designed to minimize impact, a small number of users might experience brief, intermittent networking disruptions or 502 errors as underlying services are rotated. These are typically temporary and self-correcting.
Moving early
If the scheduled maintenance window is inconvenient for your application, you may opt to move to the updated infrastructure ahead of time. The updated application infrastructure will be available starting Thursday, Oct 22nd, 2026, 12:00 UTC.
Any application that is (re)deployed or restarted after this time will be scheduled on the updated infrastructure and will not be restarted again during the maintenance window. This allows you to control the timing of the restart and avoid impact during business-critical hours.
Please note that, even when moving early, a small number of users may still experience brief, intermittent 502 errors during the scheduled maintenance window due to the rotation of underlying platform services. These events are expected to be temporary and self-correcting.
Posted on Sep 28, 2026 - 17:26 UTC
Scheduled Platform Maintenance Oct 29, 2026 06:00-08:00 UTC
We will perform updates on our platform applications. During the maintenance window, several parts of the Mendix Portal as well as APIs may become temporarily unavailable. You may not be able to log in, view or deploy your applications during this time.
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 17, 2026 - 07:03 UTC
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 17, 2026 - 07:03 UTC
Scheduled Platform Maintenance Nov 1, 2026 09:00-15:00 UTC
We will perform updates on our platform applications. During the maintenance window, you may not be able to sign in to Mendix Portal or Studio Pro. Parts of the Mendix Portal may not be available. Public APIs, administration of API credentials and security settings may also be temporarily unavailable.
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 21, 2026 - 07:04 UTC
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 21, 2026 - 07:04 UTC
Scheduled Platform Maintenance Nov 5, 2026 06:00-08:00 UTC
We will perform updates on our platform applications. During the maintenance window, several parts of the Mendix Portal as well as APIs may become temporarily unavailable. You may not be able to log in, view or deploy your applications during this time.
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 24, 2026 - 07:04 UTC
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 24, 2026 - 07:04 UTC
Mendix Cloud Platform Maintenance - Wave 4 Nov 5, 2026 08:00-16:00 UTC
Maintenance is scheduled for the application infrastructure of Mendix Cloud. The maintenance will improve the security and stability of the Mendix Cloud platform. This upgrade is executed on a platform level, which means there is no flexibility in the time period, but you can move your app early yourself (see below). An 8-hour maintenance window is planned.
Start: Thursday, Nov 5th, 2026, 08:00 UTC
End: Thursday, Nov 5th, 2026, 16:00 UTC
Impact on Mendix apps
During the maintenance, the Runtime Engines (application instances) of your Mendix applications will be restarted and redeployed to the updated application infrastructure. This is executed automatically in no specific order. To ensure continuous availability for all customer applications, the underlying infrastructure upgrades will be performed in a rolling fashion. This means the rolling upgrade process ensures no downtime for both multi-instance applications (by restarting only one Runtime Engine at a time) and single-instance applications.
While the rolling nature of these upgrades is designed to minimize impact, a small number of users might experience brief, intermittent networking disruptions or 502 errors as underlying services are rotated. These are typically temporary and self-correcting.
Moving early
If the scheduled maintenance window is inconvenient for your application, you may opt to move to the updated infrastructure ahead of time. The updated application infrastructure will be available starting Monday, Oct 19th, 2026, 12:00 UTC.
Any application that is (re)deployed or restarted after this time will be scheduled on the updated infrastructure and will not be restarted again during the maintenance window. This allows you to control the timing of the restart and avoid impact during business-critical hours.
Please note that, even when moving early, a small number of users may still experience brief, intermittent 502 errors during the scheduled maintenance window due to the rotation of underlying platform services. These events are expected to be temporary and self-correcting.
Posted on Oct 23, 2026 - 11:04 UTC
Start: Thursday, Nov 5th, 2026, 08:00 UTC
End: Thursday, Nov 5th, 2026, 16:00 UTC
Impact on Mendix apps
During the maintenance, the Runtime Engines (application instances) of your Mendix applications will be restarted and redeployed to the updated application infrastructure. This is executed automatically in no specific order. To ensure continuous availability for all customer applications, the underlying infrastructure upgrades will be performed in a rolling fashion. This means the rolling upgrade process ensures no downtime for both multi-instance applications (by restarting only one Runtime Engine at a time) and single-instance applications.
While the rolling nature of these upgrades is designed to minimize impact, a small number of users might experience brief, intermittent networking disruptions or 502 errors as underlying services are rotated. These are typically temporary and self-correcting.
Moving early
If the scheduled maintenance window is inconvenient for your application, you may opt to move to the updated infrastructure ahead of time. The updated application infrastructure will be available starting Monday, Oct 19th, 2026, 12:00 UTC.
Any application that is (re)deployed or restarted after this time will be scheduled on the updated infrastructure and will not be restarted again during the maintenance window. This allows you to control the timing of the restart and avoid impact during business-critical hours.
Please note that, even when moving early, a small number of users may still experience brief, intermittent 502 errors during the scheduled maintenance window due to the rotation of underlying platform services. These events are expected to be temporary and self-correcting.
Posted on Oct 23, 2026 - 11:04 UTC
Scheduled Platform Maintenance Nov 8, 2026 09:00-13:00 UTC
We will perform updates on our platform applications. During the maintenance window, you may not be able to sign in to Mendix Portal or Studio Pro. Parts of the Mendix Portal may not be available. Public APIs, administration of API credentials and security settings may also be temporarily unavailable.
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 28, 2026 - 07:03 UTC
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Sep 28, 2026 - 07:03 UTC
Scheduled Platform Maintenance Nov 12, 2026 06:00-08:00 UTC
We will perform updates on our platform applications. During the maintenance window, several parts of the Mendix Portal as well as APIs may become temporarily unavailable. You may not be able to log in, view or deploy your applications during this time.
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 01, 2026 - 07:03 UTC
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 01, 2026 - 07:03 UTC
Scheduled Platform Maintenance Nov 15, 2026 09:00-15:00 UTC
We will perform updates on our platform applications. During the maintenance window, you may not be able to sign in to Mendix Portal or Studio Pro. Parts of the Mendix Portal may not be available. Public APIs, administration of API credentials and security settings may also be temporarily unavailable.
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 05, 2026 - 07:13 UTC
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 05, 2026 - 07:13 UTC
Scheduled Platform Maintenance Nov 19, 2026 06:00-08:00 UTC
We will perform updates on our platform applications. During the maintenance window, several parts of the Mendix Portal as well as APIs may become temporarily unavailable. You may not be able to log in, view or deploy your applications during this time.
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 08, 2026 - 07:03 UTC
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 08, 2026 - 07:03 UTC
Scheduled Platform Maintenance Nov 22, 2026 09:00-13:00 UTC
We will perform updates on our platform applications. During the maintenance window, you may not be able to sign in to Mendix Portal or Studio Pro. Parts of the Mendix Portal may not be available. Public APIs, administration of API credentials and security settings may also be temporarily unavailable.
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 12, 2026 - 07:04 UTC
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 12, 2026 - 07:04 UTC
Scheduled Platform Maintenance Nov 26, 2026 06:00-08:00 UTC
We will perform updates on our platform applications. During the maintenance window, several parts of the Mendix Portal as well as APIs may become temporarily unavailable. You may not be able to log in, view or deploy your applications during this time.
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 15, 2026 - 07:03 UTC
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 15, 2026 - 07:03 UTC
Scheduled Platform Maintenance Nov 29, 2026 09:00-15:00 UTC
We will perform updates on our platform applications. During the maintenance window, you may not be able to sign in to Mendix Portal or Studio Pro. Parts of the Mendix Portal may not be available. Public APIs, administration of API credentials and security settings may also be temporarily unavailable.
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 19, 2026 - 07:03 UTC
It may also not be possible to deploy apps or administer your environments during this time.
In case you are affected, please retry your actions once the scheduled maintenance has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 19, 2026 - 07:03 UTC
Scheduled Platform Maintenance Dec 3, 2026 06:00-08:00 UTC
We will perform updates on our platform applications. During the maintenance window, several parts of the Mendix Portal as well as APIs may become temporarily unavailable. You may not be able to log in, view or deploy your applications during this time.
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 22, 2026 - 07:03 UTC
Please retry your actions once the maintenance window has been completed.
To see the full list of affected components, please select “View all updates”.
Posted on Oct 22, 2026 - 07:03 UTC