Legacy customer control panel taken offline as a precaution
- Martedì, 13º Ottobre, 2026
- 13:25pm
Dear ALYPOD Customer,
We would like to share the following update regarding our infrastructure:
Legacy customer control panel taken offline as a precaution
As a precaution, we have taken our legacy customer control panel offline. It runs on PHP and is affected by two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), for which active exploitation has been reported. We have no evidence that customer data or systems have been affected. Impact: You cannot log in to the legacy control panel until further notice. Your servers, VPS, storage and other services are not affected and continue to run normally. Workaround: Manage your services via new.alypod.com or the API. You are able to login with your legacy panel credentials. Recommended actions: If you run PHP applications on your own ALYPOD services, apply the PHP security update as soon as your distribution or vendor releases it. Configuration workarounds are ineffective. Be alert to phishing emails asking you to log in or “verify” your account. We never ask for your password by email. Next steps: We will restore the legacy panel once the patch has been applied and verified, and will post updates here. [UPDATE 21.10.2026 03:05 pm (UTC+2)] Dedicated server control is currently shutdown as well. [UPDATE 21.10.2026 03:21 pm (UTC+2)] ALYPOD blog and full monitoring services are also shutdown until pattched. [UPDATE 21.10.2026 05:38 pm (UTC+2)] ALYPOD blog and full monitoring are patched and available again. [UPDATE 21.10.2026 09:31 pm (UTC+2)] Legacy CCP is patched and online again. [UPDATE 22.10.2026 12:55 pm (UTC+2)] All services are patched and online again.
- Status: Ongoing
- Start: Oct 13, 2026 13:25 UTC
Our team is actively monitoring the situation and will post an update as soon as more information becomes available. We apologise for any inconvenience and thank you for your understanding.
Kind regards,
The ALYPOD Team
