Technical Alert: TargetX Email Impact due to PHP Vulnerabilities

[10/23/26 1:36pm]

Our team continues to update and test the PHP framework behind legacy TargetX Email. This remains our top priority, with our team working through the weekend to implement a fix. At this time, we are unable to share an expected timeline for a full resolution. Our goal remains to complete the necessary updates and thorough testing with as little downtime as possible. 

Updates will continue to be posted in this document as available, and we will share an email update on Monday morning at the latest, unless new information is available prior to Monday. 

If you have critical or time-sensitive communication needs that would typically leverage our legacy email system, our Support team is prepared to assist you in leveraging the Communication Planner for these urgent requests or any further questions via the TargetX User Community. 

[10/22/26 2:37pm]

TargetX Email Impact due to PHP Vulnerabilities 

Our team continues to update and test the PHP framework behind legacy TargetX Email as our top priority. In the interim, we wanted to share some clarifying information. 

What doesn't work: 

  • Legacy TargetX Email campaign builder/schedulers - Can't edit existing campaigns or build new campaigns  
  • Opt-out pages linked in email footers (quick unsubscribes still work) 

What partially works: 

  • Many of the TargetX Email tabs will continue to display, but there are some widgets that will not work (or return a 503 response):  
    • Individual Activity panels for Contacts, Leads, and Relationship (v1)s, including the View and Resend features 
    • Statistics panels for Campaigns and Broadcasts 
    • Query view in the UI: Preview Lists button 

What will continue to work: 

  • Campaigns already created and scheduled will continue to send e-mails 
  • Template builders should continue to work 
  • Previously scheduled Broadcasts may be deleted by following the process outlined in the Managing Email Broadcasts documentation 
    • We recommend deleting at least one hour prior to scheduled send 
  • Triggered emails such as Event Reminders are unaffected and will continue to send 
  • As a reminder, Communication Planner is fully functional as it runs on a separate framework 

We appreciate your continued patience as we work to address this as efficiently and safely as possible. Keeping your data secure is our top priority. We will share updated information as it becomes available. 

If you require assistance with the Communication Planner, or have further questions, please reach out to Support via a Case in the TargetX User Community 

[10/21/26 5:55pm] 

After becoming aware of the recently publicized PHP vulnerabilities impacting websites and services worldwide, the TargetX team has determined that the legacy Email Campaign user interface is running on an impacted version of PHP. At this time, we have found no evidence that customer data has been accessed. 

Out of an abundance of caution, the legacy TargetX Email Campaign interface will be temporarily taken offline to apply important security updates to its underlying PHP engine and test the fixes, beginning at 6:00 PM EDT today, October 21. This does not impact emails built in the TargetX Communication Planner, only legacy email - including use of the TargetX Email Campaign Builder. 

What this means for you: 

We are working to make these updates as quickly and safely as possible, and will share additional information as soon as it becomes available. We appreciate your patience. Keeping your data secure is our top priority. 

If you need to cancel a previously scheduled broadcast, have questions about using the Communication Planner, or need help with a time sensitive send, please submit a Case to Support in the TargetX User Community.