← Back to status overview

Security Notice: Recently Disclosed PHP Vulnerabilities

Incident
Timeline
Start Wednesday October 21, 09:54 (15 hours ago)
Impact
No service impact expected.

We are aware of the recently disclosed security vulnerabilities affecting PHP and are actively monitoring the availability of security updates.

What are we doing?

The PHP versions running on our hosting infrastructure are maintained through the official software repositories of our technology partners, including CloudLinux, Plesk and DirectAdmin.

We are closely monitoring these vendors for the release of patched PHP versions. As soon as the necessary security updates become available through their official distribution channels, we will deploy them across the affected systems as quickly as possible.

Why aren't the updates installed immediately?

Security patches must first be made available and validated by the relevant software vendors. Installing PHP versions manually outside these supported distribution channels could introduce compatibility issues or affect the stability and maintainability of our hosting environments.

For this reason, we follow the official vendor update process to ensure that security fixes are applied safely and reliably.

Do I need to take any action?

No action is required on your part. We will take care of deploying the necessary PHP security updates as soon as they become available through the supported software channels.

We understand that security is important, and we want to assure you that we are treating these vulnerabilities seriously and monitoring developments closely.

If you have any questions or concerns, please don't hesitate to contact our support team.

  • Reported
    1 hour ago — Wednesday October 21, 23:55

    At the time of writing, the required PHP security patches for CloudLinux servers are still not available.

    All other servers, including various infrastructure servers, have now been successfully patched.

    We will continue to monitor developments as closely as possible throughout the night. As soon as CloudLinux releases the necessary patches, we will deploy them across the remaining affected servers as quickly as possible.

    We will publish another update as soon as there is new information to share.

    Thank you for your continued patience and understanding.

  • Reported
    2 hours ago — Wednesday October 21, 23:21

    We are still awaiting the release of the necessary PHP security patches from CloudLinux.

    We continue to closely monitor their availability and will begin deploying the updates across all remaining affected servers as soon as they are released.

    We appreciate your continued patience and understanding and will provide further updates as soon as new information becomes available.

  • Reported
    6 hours ago — Wednesday October 21, 19:30

    We are currently performing a second round of security updates across our hosting infrastructure. Once this round is completed, we will begin a verification process to confirm that the necessary patches have been successfully applied.

    Following these checks, we expect the vast majority of servers not running CloudLinux to be fully patched.

    CloudLinux currently expects to release the required security updates within approximately two hours. As soon as these updates become available, we will begin deploying them to the remaining affected servers, including our web hosting and reseller hosting infrastructure and Managed VPS servers running CloudLinux.

    We continue to monitor the situation closely and will provide further updates as progress is made.

    Thank you for your continued patience and understanding.

  • Reported
    6 hours ago — Wednesday October 21, 18:33

    We have successfully completed the deployment of the necessary PHP security updates across all DirectAdmin and Plesk servers that do not use CloudLinux.

    For servers running CloudLinux, including our web hosting and reseller hosting infrastructure, as well as Managed VPS customers using CloudLinux, we are still awaiting the release of the necessary security updates from CloudLinux.

    CloudLinux is currently working on making these updates available. We are closely monitoring their release channels and will deploy the patches as soon as they become available.

    We will continue to keep our customers informed as the rollout progresses.

    Thank you for your patience and understanding.

  • Reported
    9 hours ago — Wednesday October 21, 15:58

    We have started rolling out the security updates addressing the recently disclosed PHP vulnerabilities across our hosting infrastructure.

    Due to the scale and urgency of these updates, our technical team is currently fully focused on deploying the necessary patches as quickly and safely as possible.

    As a result, regular support services are temporarily unavailable while these critical maintenance activities are underway.

    We will continue to keep our customers informed of the progress and provide further updates as soon as possible.

    We appreciate your understanding and patience while we work to ensure the security of our hosting infrastructure.

  • Reported
    11 hours ago — Wednesday October 21, 14:10

    CloudLinux has reported: "https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5"

  • Reported
    14 hours ago — Wednesday October 21, 11:16

    DirectAdmin has reported: "We will release an update with new PHP versions as soon as they are published by the PHP developers."

Subscribe to updates
Last updated just now