Current answer
Mendix Technology experienced a major incident: Security update: Critical Java patch update. The provider currently marks this incident Identified.
Provider-reported start: . Notice published: .
Looking for an update now? Check the current status, or follow Mendix Technology for future changes.
Incident Lifecycle
Affected Components
Mendix Cloud US-East
Mendix Cloud EU (Frankfurt)
Mendix Cloud Asia Pacific (Tokyo)
Mendix Cloud Dedicated US-West Echo
Mendix Cloud Free Tier EU
Mendix Cloud Dedicated UK Echo
Mendix Cloud UK
Mendix Cloud Dedicated Asia Pacific (Singapore) Echo
Mendix Cloud IE
Mendix Cloud Dedicated US-East Hotel
Mendix Cloud Dedicated US-East Mike
Mendix Cloud US-West
Mendix Cloud Dedicated US-East Papa
Mendix Cloud Asia Pacific (Sydney)
Mendix Cloud Dedicated EU (Frankfurt) Sierra
Mendix Cloud Canada (Central)
Mendix Cloud Dedicated EU (Frankfurt) Uniform
Mendix Cloud Asia Pacific (Singapore)
Mendix Cloud Dedicated Asia Pacific (Singapore) Able
Mendix Cloud Dedicated US-East Kilo
Mendix Cloud Dedicated US-East Charlie
Mendix Cloud Asia Pacific (Mumbai)
Mendix Cloud Dedicated US-East Colin
Mendix Cloud Dedicated EU (Frankfurt) Metro
Mendix Cloud Africa (Cape Town)
Mendix Cloud South America (São Paulo)
Mendix Cloud EU (Frankfurt 2)
Mendix Cloud Asia Pacific (Osaka)
Mendix Cloud Asia Pacific (Seoul)
Mendix Cloud Asia Pacific (Jakarta)
Mendix Cloud EU (Frankfurt): GenAI Resources
Mendix Cloud Canada (Central): GenAI Resources
Incident Timeline
Identified
What happened
On 20 October 2026, Oracle has released an October 2026 Critical Patch Update (https://blogs.oracle.com/security/october-2026-critical-patch-update-released) that includes multiple fixes for Java versions that are in use by Mendix apps.
Who is affected
All customers with applications running on Mendix Cloud.
What we did
We have updated the Java version for Java 25 and Java 21. These new versions include the critical patch updates.
We're working on updating the other Java versions used on Mendix Cloud (Java 11, Java 17). For these Java versions, we're waiting for an update from our vendors. Once these updates are available, we will update the Java versions used on Mendix Cloud.
What you need to do
If your app is running on Java 21 or Java 25, you should redeploy your app. You can find the Java version used for your environment on the Environment Details page (https://docs.mendix.com/developerportal/deploy/environments-details/#application-status). You can redeploy the same package that is already running on your environment, or build and deploy a new package. A restart is not enough!
We recommend doing this in your usual order, so you can check that your applications still work before updating production:
1. Test environment
2. Acceptance environment
3. Production environment
If your app is running on Java 11 or Java 17, you should keep an eye on this Statuspage incident. We will update this when we release new Java versions on Mendix Cloud. These updates will include instructions for the specific Java versions.
Deployment requirements
To apply these security fixes, you must perform a regular deployment (non-Zero Downtime Deployment). Zero Downtime Deployment (ZDT) will not apply these security fixes, even when redeploying an existing deployment package. You do not need to create a new deployment package. You can redeploy your existing package using the regular deployment process. If you have already performed a Zero Downtime Deployment to apply these fixes, please redeploy using the regular deployment process. A regular deployment causes a short period of downtime while the application restarts, so please plan accordingly.
If you have any questions, feel free to contact support.
On 20 October 2026, Oracle has released an October 2026 Critical Patch Update (https://blogs.oracle.com/security/october-2026-critical-patch-update-released) that includes multiple fixes for Java versions that are in use by Mendix apps.
Who is affected
All customers with applications running on Mendix Cloud.
What we did
We have updated the Java version for Java 25 and Java 21. These new versions include the critical patch updates.
We're working on updating the other Java versions used on Mendix Cloud (Java 11, Java 17). For these Java versions, we're waiting for an update from our vendors. Once these updates are available, we will update the Java versions used on Mendix Cloud.
What you need to do
If your app is running on Java 21 or Java 25, you should redeploy your app. You can find the Java version used for your environment on the Environment Details page (https://docs.mendix.com/developerportal/deploy/environments-details/#application-status). You can redeploy the same package that is already running on your environment, or build and deploy a new package. A restart is not enough!
We recommend doing this in your usual order, so you can check that your applications still work before updating production:
1. Test environment
2. Acceptance environment
3. Production environment
If your app is running on Java 11 or Java 17, you should keep an eye on this Statuspage incident. We will update this when we release new Java versions on Mendix Cloud. These updates will include instructions for the specific Java versions.
Deployment requirements
To apply these security fixes, you must perform a regular deployment (non-Zero Downtime Deployment). Zero Downtime Deployment (ZDT) will not apply these security fixes, even when redeploying an existing deployment package. You do not need to create a new deployment package. You can redeploy your existing package using the regular deployment process. If you have already performed a Zero Downtime Deployment to apply these fixes, please redeploy using the regular deployment process. A regular deployment causes a short period of downtime while the application restarts, so please plan accordingly.
If you have any questions, feel free to contact support.
Oct 23, 2026 at 1:22 PM UTC
Was your business affected by this Mendix Technology outage?
Follow Mendix Technology and route available status alerts to email or a team channel.