Shared web hosting (cPanel) suspended due to PHP vulnerabilities
- Miércoles, 21 Octubre, 2026
- 13:00pm
Dear ALYPOD Customer,
We would like to share the following update regarding our infrastructure:
Shared web hosting (cPanel) suspended due to PHP vulnerabilities
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) are being actively exploited. As a precaution, we have suspended our shared web hosting (cPanel) until it is patched. Hosted websites and the cPanel interface are unavailable. We have no evidence that customer data or systems have been affected. Not affected: Running servers, VPS (including cloud-init installations), VDS, storage and other services continue as normal. Email sending and receiving should still work, although webmail is not accessible. If you run PHP applications on your own ALYPOD services, apply the PHP security update as soon as it is available. Configuration workarounds are ineffective. Please do not open Support tickets for this matter at the moment. Web hosting will be restored once the patch is applied and verified. We will update this page as soon as we have news. [UPDATE 21.10.2026 05:48 pm (UTC+2)] We expect updates to be released at around 7pm UTC and start patching as soon as they are available. [UPDATE 21.10.2026 10:57 pm (UTC+2)] All web hosting services are fully patched and available. The issue has been resolved.
- Status: Ongoing
- Start: Oct 21, 2026 13:00 UTC
Our team is actively monitoring the situation and will post an update as soon as more information becomes available. We apologise for any inconvenience and thank you for your understanding.
Kind regards,
The ALYPOD Team
