Network status & maintenance

Other · Started: 21 October 2026, 09:59 · Resolved: 22 October 2026, 03:33

1. Resolved 22 October 2026, 03:33
   At 3:00 AM all work was completed. PHP version 4.4 (2006) and PHP version 5.1 (2008) will no longer be available because these versions no longer receive patches. Various spot checks have been done, and everyone is back on the PHP version they were on at the start of the day on Wednesday.
   
   If your website is giving you problems, check whether you're on the right PHP version, and if you can't figure it out, feel free to get in touch with us.
   
   It was a special day for the internet worldwide. 71% of all websites in the world run on PHP.
   
   Sleep well!
2. In progress 22 October 2026, 01:29
   Around 1:00 AM we finally received the CloudLinux PHP updates for all PHP versions. We're now busy installing these on 1 server, we'll test that thoroughly and then do the rest. Our estimate is that all servers will be done within 2 hours. After that, we'll switch the sites that weren't on PHP 8.3 back to their own PHP version. Some even going back to PHP 5.1 ;-)
3. In progress 21 October 2026, 22:46
   By now we've mapped out all of today's actions and conducted extensive research on all our servers, and these servers have also been continuously monitored by us throughout the entire day.
   We haven't found any traces of attempts to exploit these vulnerabilities.
   
   The decision to take all servers down was taken purely as a precaution, so that we could immediately eliminate all possibilities for abuse, but also to put ourselves in a position to act in a structured way the moment (at 16:00) the details of the vulnerabilities were made public.
   
   This was a difficult choice that we've never had to make before, but when the potential consequences are as disastrous as in this case, a few hours of downtime is justifiable compared to taking the risk.
   After the details of the vulnerabilities were disclosed, it was confirmed that we had made the right choice: the mitigations and additional WAF rules that were known turned out not to offer sufficient protection after all. Servers that were online remained vulnerable despite these measures. The only servers that were completely safe were servers that were unreachable or already had the patch installed.
   
   Despite the impact this has had on our customers, we've received a lot of support and understanding for this choice, and we're of course grateful for that.
   
   Unfortunately, the CloudLinux updates are taking quite a bit longer than we hoped, they expect to have released the last updates around 00:30. We'll make sure these are installed immediately when possible, and afterwards we'll set the PHP version of each account back to the version it had before.
   
   Most importantly: your website and our servers are safe.
4. In progress 21 October 2026, 21:36
   It is possible to choose a different PHP version in DirectAdmin, but we recommend not doing so. Only the native version is currently secure; for the other versions, we are still waiting for an update from CloudLinux. We'll let you know as soon as other PHP versions can be used again.
5. In progress 21 October 2026, 20:58
   All accounts are now running on a secure PHP 8.3 version.
   If your site doesn't work, this is because your site can't handle a modern PHP version. We recommend bringing your site up-to-date soon so that it does support a modern PHP version. If that doesn't work out, you can of course get in touch with us.
   
   As soon as the CloudLinux updates go live, we'll roll them out and set the PHP versions of all accounts back to where they were.
   
   We're going to continue for a bit.
6. In progress 21 October 2026, 19:56
   As a temporary measure, we're temporarily setting all customers' accounts to the native 8.3 PHP version; this version is safe and works.
   We're rolling this out across all our servers — if your site isn't working yet, it hasn't been rolled out to your server yet. We're working on that.
   
   Once CloudLinux has published a patch for all PHP versions, we'll switch the PHP versions of all accounts back to the versions they were using before.
7. In progress 21 October 2026, 19:18
   We're in the process of rolling out the native PHP version outside of CloudLinux, while we wait for a release of their patch.
   We're now rolling this out across all servers; sites using PHP version 8.3 will be back online soon. The other versions will follow immediately once CloudLinux releases the patches for them.
8. In progress 21 October 2026, 12:08
   One of the security software services running on all our servers is Imunify360.
   
   They just published a new ruleset that is directly active on all our servers, which removes a large part of the exploit risk until the patch:
   
   "The Imunify360 ModSecurity ruleset 8.83 is now in the Stable channel. It contains a blocking rule for the publicly circulating exploit shape for CVE-2026-109618 / CVE-2026-109619, which targets the PHP session upload progress handling of multipart requests, plus a telemetry rule to track related activity."
9. In progress 21 October 2026, 10:23
   If your website or application handles sensitive data and you'd rather be safe than sorry, you can choose to make your website or application unreachable until the patch has been carried out.
   
   You can do this by going to DirectAdmin -> opening File Manager -> going to the /domains/yourdomain.xx folder -> renaming the public_html folder there to, for example, public_htmloud. The code in this folder will then no longer be accessible. -> After the patch, rename the folder back to public_html to make everything accessible again.
10. In progress 21 October 2026, 09:59
    Two new critical PHP vulnerabilities have been discovered that are believed to impact all PHP versions. You can find more information about this in this article:
    https://tweakers.net/nieuws/253568/php-waarschuwt-voor-twee-ernstige-bugs-die-makkelijk-uit-te-buiten-lijken.html
    
    Our team is on top of this, and as soon as a mitigation or patch becomes available, we will deploy it across all our servers.
    
    The official PHP patch is not expected to apply to versions older than 8.2. Is your site still running on an older version? Then we recommend updating it as soon as possible to at least 8.3.
    Here's how to do this: https://www.weboke.nl/knowledgebase/212/PHP-versie-wijzigen.html
    
    Please note: If parts of your website are not up to date, your website may stop working. Identify these components and disable them, or update them where possible.
    
    Our servers use CloudLinux, which releases backports for older PHP versions when security patches are issued, allowing older versions to also be protected. We expect these backports to become available with some delay.
    
    Should we deem it necessary, we will temporarily make all our servers unreachable to safeguard the security of our customers' websites. Once the security patch has been applied, everything will come back online.
    
    After the patches have been implemented, we will run extensive malware scans on all our servers to verify everything is secure.
    
    These vulnerabilities affect all hosting providers and the vast majority of websites worldwide.

Server · Affects: Nextcloud servers · Started: 20 September 2026, 00:30 · Resolved: 20 September 2026, 05:43

1. Resolved 20 September 2026, 05:43
   The maintenance work was successfully completed at 05:42.
2. In progress 20 September 2026, 03:27
   The maintenance is running a bit behind schedule. Expected to finish by 06:00.
3. In progress 20 September 2026, 00:33
   The scheduled maintenance has started.
4. Scheduled 19 September 2026, 22:16
   In the night of September 19 to 20, we will be performing maintenance on our Nextcloud servers. The backup/synchronization processes will also be extensively tested.

Other · Affects: Alle servers · Started: 19 September 2026, 23:00 · Resolved: 20 September 2026, 05:00

1. Resolved 20 September 2026, 05:00
   The maintenance has been completed.
2. In progress 19 September 2026, 23:03
   Updates/upgrades are being performed on all servers. Some need to be briefly restarted, and for others, there will be services that are briefly unavailable.