Security Update: Web Server Vulnerabilities Fixed the Same Day
Our response is complete. Every APB360 server was on the fixed release the evening the fixes were published, with no downtime. You do not need to do anything.
The Problem
On October 26, 2026, Ubuntu published fixes for five vulnerabilities in nginx, the web server that sits in front of every APB360 server and handles each request before it reaches the application (Ubuntu security notice USN-8955-1: CVE-2026-15176, CVE-2026-93479, CVE-2026-95101, CVE-2026-97205 and CVE-2026-97629). Depending on how a server is configured, the flaws could let an attacker crash the web server, interfere with requests it passes along, or, in the worst cases, run code on it. Ubuntu published an update to a compression library the web server uses at the same time.
How We Responded
- Same-day inventory. Within hours, we checked every APB360 server for its exact web server version, and checked our configuration against each of the five flaws. Most of them depend on features APB360 does not use, which limited our exposure, but we treated every server as affected.
- Tested first. We installed the fix on a test system and ran our full standard test suite, page by page, before any live server was touched.
- Updated one server at a time, no downtime. Most of APB360 runs on pairs of servers. We updated one server in each pair, confirmed every service was answering normally, and only then updated its partner, so one server was always serving you. Where a service runs on a single server, the web server restarted in about a second.
- Verified. We then checked every server directly: each one reports the fixed releases, nothing running still uses the old versions, and no security updates are waiting.
Status
- Updated and working normally: the APB360 portal, the APB360 API, the mobile apps and scanners that use it, secure document upload links, and the internal systems behind them.
- Not affected: this website, apb360.com.
What You Need to Do
Nothing. Keep using APB360 as usual.
Questions? Email help@apb360.com or call 251-677-7978.