Apache CVE-2026-119618
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 12, 2026 - 20:55 EST
Scheduled - **Incident Name:** Security Advisory: Apache Vulnerability (CVE-2026-119618)

**Current Status:** Monitoring / Customer Action Required

**InterServer Shared Hosting Update:**
We have audited our shared hosting infrastructure against the newly disclosed Apache Remote Code Execution vulnerability (CVE-2026-119618). InterServer shared hosting environments primarily run LiteSpeed web servers, which are completely unaffected by this issue. The small number of shared systems running Apache have already been patched and secured by our engineering team. No action is required for shared hosting customers.

**Action Required for VPS and Dedicated Server Customers:**
If you manage your own VPS or Dedicated Server running Apache, you need to apply this critical security update immediately. Control panel vendors and operating system repositories have released patches to secure the `mod_http2` module (typically bringing Apache to version 2.4.71).

Please log into your server via SSH as theuser and run the applicable commands below to update your system.

### cPanel (EasyApache 4)
cPanel has pushed the fix to the EasyApache 4 repository. Clean your package manager cache, update the packages, and restart the web server: using yum/dnf

```bash
yum clean all
yum update ea-apache24
/scripts/restartsrv_httpd
```

### DirectAdmin
DirectAdmin uses CustomBuild to manage and compile software from source. Navigate to the CustomBuild directory, update the versions script, and recompile Apache:

```bash
cd /usr/local/directadmin/custombuild
./build update
./build apache
```

### Plesk & Standalone Servers (No Control Panel)
Plesk relies entirely on your operating system's default package manager. Even if Plesk is configured to use Nginx as the primary frontend proxy, Apache is still running in the background and must be patched.

Update the module using your OS package manager:

**For RHEL / AlmaLinux / CloudLinux / CentOS:**
```bash
dnf clean metadata
dnf update mod_http2
systemctl restart httpd
```

**For Ubuntu / Debian:**
```bash
apt-get update
apt-get install apache2
systemctl restart apache2
```

**Verification & Mitigation:**
After applying the updates, verify your Apache version by running `httpd -v` or `apachectl -v` to ensure it reflects version 2.4.71 (or that your specific OS package changelog lists CVE-2026-119618). If your operating system vendor has not yet released the patched package to their repository, you can temporarily mitigate the vulnerability by disabling HTTP/2 in your web server configuration.
Nov 12, 2026 20:55 - Nov 15, 2026 20:55 EST
Microsoft delivery delays
Update - Microsoft emails remain delayed.
Nov 12, 2026 - 19:17 EST
Update - Further information from microsoft can be followed at https://x.com/MSFT365Status/status/2120938282204688468
Nov 12, 2026 - 15:05 EST
Identified - We have identified the Microsoft responses behind these delays, including “The maximum number of concurrent server connections has exceeded a limit, closing transmission channel” and “Temporary server error. Please try again later”, and added handling for them to our system.

Messages that receive these responses are now moved to a separate slow queue and retried automatically from there. This keeps them from backing up the main queue, so delivery to other destinations should no longer be held up behind Microsoft-bound mail.

Email to Microsoft-hosted recipients, including Outlook, Hotmail and Microsoft 365 domains, may continue to be delayed while the issue persists on Microsoft’s side. No mail has been lost, and no action is needed from senders. Delayed messages will be delivered as Microsoft accepts them.
Nov 12, 2026 - 15:01 EST
Investigating - Emails to Microsoft are currently delayed, with similar reports from other vendors on the Mail ops list including errors such as 'The maximum number of concurrent server connections has exceeded a limit, closing transmission channel'

The issue is widespread and causing email delays.
Nov 12, 2026 - 14:33 EST
Scheduled Infrastructure Maintenance | TEB4
Update - storage-kvm2100.is.cc, storage-kvm2700.is.cc, storage-kvm1800.is.cc, and openvz83.is.cc are back online
Nov 11, 2026 - 01:03 EST
Update - The servers below need to be shut down for hardware maintenance. Each server will be offline for about 15 minutes. IP addresses do not change.

storage-kvm2100.is.cc, storage-kvm2700.is.cc, storage-kvm1800.is.cc, openvz83.is.cc
Nov 10, 2026 - 18:10 EST
Update - kvm411/webhosting2037 and kvm431/webhosting3000 are back online. Both servers are stable, and we are monitoring for changes.
Nov 10, 2026 - 18:09 EST
Update - kvm411/webhosting2037 and kvm431/webhosting3000 are currently offline and both will have a larger downtime then expected.
Nov 09, 2026 - 19:14 EST
Update - The servers below are scheduled for maintenance on the dates shown, between 10:00 AM and 10:00 PM Eastern Time. Each server is offline for a maximum of up to 3 hours within that window. IP addresses do not change.

Monday, November 9
storage-kvm2900.is.cc, kvm367.is.cc, storage-kvm1900.is.cc, plesk6700.is.cc, qs393.is.cc, storage-kvm2300.is.cc, kvm324.is.cc, kvm325.is.cc, plesk3200.is.cc, plesk3300.is.cc, qs320.is.cc, storage-kvm1700.is.cc, storage-kvm2100.is.cc, kvm358.is.cc, qs195.is.cc, qs291.is.cc, kvm44.interserver.net, qs232.is.cc, qs110.is.cc, qs473.is.cc, qs114.is.cc, qs329.is.cc, qs318.is.cc, qs295.is.cc, qs394.is.cc, qs138.is.cc, backup14.trouble-free.net, qs227.is.cc, qs230.is.cc, qs231.is.cc, plesk1300.trouble-free.net, kvm411.is.cc, kvm431.is.cc, qs142.is.cc, qs194.is.cc, qs292.is.cc, storage1800.is.cc, kvm535.is.cc, qs213.is.cc, kvm464.is.cc, plesk6600.is.cc, plesk8400.is.cc, kvm336.is.cc, kvm301.is.cc, vda1700.is.cc, vda3200.is.cc, vda3400.is.cc, vda5600.is.cc, da500.is.cc, webhosting2051, webhosting3000
Nov 08, 2026 - 01:54 EST
Update - kvm347.is.cc/vda7100.is.cc is now back online.
Nov 05, 2026 - 20:51 EST
Update - kvm347.is.cc/vda7100.is.cc is the last system to come online. This system is being worked on.
Nov 05, 2026 - 17:19 EST
Update - The kvm347.is.cc is reporting a boot error and is currently being investigated.
Nov 05, 2026 - 17:01 EST
Update - The following systems remain in today's batch to come online
openvz130.is.cc
kvm347.is.cc
vda7100.is.cc
OpenVZ61

and are expected to be up shortly
Nov 05, 2026 - 16:39 EST
Update - The servers below are scheduled for maintenance on the dates shown, between 10:00 AM and 10:00 PM Eastern Time. Each server is offline for a maximum of up to 3 hours within that window. IP addresses do not change.

Wednesday, November 4
qs296.is.cc, qs294.is.cc, openvz132.is.cc, qs304.is.cc, qs144.is.cc, qs474.is.cc, qs307.is.cc, qs306.is.cc, qs305.is.cc, kvm335.is.cc, qs425.is.cc, kvm338.is.cc, storage-intvps1.is.cc, qs385.is.cc, qs297.is.cc, qs392.is.cc, kvm516.is.cc, kvm357.is.cc, kvm333.is.cc, qs229.is.cc, qs149.is.cc, qs136.is.cc, qs249.is.cc, openvz23.is.cc, qs480.is.cc, qs383.is.cc, qs187.is.cc, qs188.is.cc, qs190.is.cc, qs446.is.cc

Thursday, November 5
qs287.is.cc, storage-kvm2000.is.cc, openvz46.is.cc, openvz129.is.cc, storage-kvm500.is.cc, openvz133.is.cc, qs468.is.cc, kvm513.is.cc, kvm300.is.cc, storage-kvm1400.is.cc, kvm514.is.cc, qs159.is.cc, qs196.is.cc, qs237.is.cc, qs214.is.cc, kvm79.is.cc, qs469.is.cc, qs271.is.cc, qs470.is.cc, qs182.is.cc, qs208.is.cc, qs197.is.cc, kvm307.is.cc, qs282.is.cc, storage-kvm2200.is.cc, openvz61.is.cc, kvm327.is.cc, kvm347.is.cc, openvz130.is.cc, storage-kvm1600.is.cc
Nov 03, 2026 - 18:50 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 02, 2026 - 08:00 EST
Update - The servers below are scheduled for maintenance on the dates shown, between 10:00 AM and 10:00 PM Eastern Time. Each server is offline for a maximum of up to 3 hours within that window. IP addresses do not change.

Monday, November 2
storage-kvm2600.is.cc, storage-kvm2700.is.cc, storage-kvm2800.is.cc, storage-kvm3300.is.cc, openvz32.is.cc, openvz52.is.cc, openvz118.is.cc, hyperv71.is.cc, hyperv72.is.cc, hyperv118.is.cc, hyperv122.is.cc, hyperv126.is.cc, hyperv127.is.cc, hyperv129.is.cc, hyperv133.is.cc, hyperv134.is.cc, hyperv148.is.cc

Tuesday, November 3
kvm321.is.cc, kvm322.is.cc, kvm332.is.cc, openvz83.is.cc, openvz91.is.cc, openvz102.is.cc, openvz116.is.cc, openvz126.is.cc, openvz131.is.cc, storage-kvm1800.is.cc, storage-kvm4700.is.cc, storage-kvm4800.is.cc, hyperv98.is.cc, hyperv109.is.cc, hyperv111.is.cc, hyperv113.is.cc, hyperv114.is.cc, hyperv123.is.cc, hyperv154.is.cc, HVplesk9400.is.cc

* This include webhosting systems
- webhosting2043
- vda3300
- kvm2800
Nov 2, 2026 08:00-09:00 EST
Scheduled - We will be performing scheduled maintenance at our TEB4 data center as part of ongoing facility and network infrastructure upgrades.

Maintenance will be carried out in phases to minimize service disruptions. Affected servers will experience a temporary interruption of service, with expected downtime of up to 3 hours per server.

As maintenance windows are finalized, additional updates will be posted identifying the affected servers and their scheduled dates and times.

We will continue to provide updates throughout the maintenance process until all work has been completed.
Nov 2, 2026 08:00-09:00 EST

About This Site

Interserver Status Page

my Operational
Management Portal Operational
Datacenters Operational
TEB2 Operational
TEB4 Operational
TEB5 Operational
TEB6 Operational
Equinix NY4 Operational
Equinix LAX1 Operational
LAX2 Operational
TEB7 Operational
Network Operational
Network Operational
Services Degraded Performance
Webhosting Operational
Storage Operational
VPS Under Maintenance
Mailbaby Degraded Performance
Scrub Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Nov 13, 2026

No incidents reported today.

Nov 12, 2026

Scheduled Maintenance | KVM505
Resolved - This incident has been resolved.
Nov 12, 17:48 EST
Investigating - We will be performing scheduled maintenance on KVM505, including migrating hosted virtual machines to a new host.

The migration is expected to take approximately 5 minutes, with affected virtual machines expected to be back online within 10 minutes.

We will provide an update once maintenance is completed and services have been verified.
Nov 12, 14:47 EST
switch38 teb6
Resolved - This incident has been resolved.
Nov 12, 14:32 EST
Investigating - switch38-teb6 has unexpectedly restarted. While it is back online a replacement switch is being prepped.

This affects the following kvm systems
kvm569
kvm570
Nov 10, 09:58 EST

Nov 11, 2026

Litespeed Critical Security Advisory
Completed - The scheduled maintenance has been completed.
Nov 11, 11:44 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 10, 11:44 EST
Scheduled - A security issue has been fixed in LiteSpeed Web Server (Enterprise) related to how Apache configuration is handled. The fix is available now in LSWS v6.3.7 build 9 and v6.4.0 RC2 build 7.

All directadmin, cpanel and dastorage systems are being updated.

Users can update with
/usr/local/lsws/admin/misc/lsup.sh -v 6.3.7 -b 9
Nov 10, 11:43 EST

Nov 10, 2026

Nov 9, 2026

Mailbaby zone4 maintenance
Completed - The scheduled maintenance has been completed.
Nov 9, 15:36 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 9, 11:41 EST
Scheduled - As part of the TEB4 maintenance today zone4 for mailbaby will be temporarily offline. Mailbaby runs under a 4 zone system, and the other three zones will handle all deliveries during this time. Emails queued with in zone4 however, will not reattempted delivery until the zone is back online. Queued emails that are still in the zone are emails that tend to be from the remote server being down, or greylisted emails that would be delayed in all cases.
Nov 9, 11:40 EST
Rolling Kernelupdates
Completed - The scheduled maintenance has been completed.
Nov 9, 00:00 EST
Update - storage-kvm300
storage-kvm1200.is.cc

Are scheduled for a reboot
Nov 6, 16:54 EST
Update - The following systems are scheduled for reboots

storage-kvm10.lax1.is.cc
storage-kvm15.dfw1.is.cc
storage-kvm14.dfw1.is.cc
storage-kvm10.lax1.is.cc
storage-kvm9.lax1.is.cc
Nov 6, 16:14 EST
Update - The following systems are scheduled
storage-kvm6200.is.cc -
storage-kvm6100.is.cc -
storage-kvm6000.is.cc -
storage-kvm5800.is.cc -
storage-kvm5700.is.cc -
Nov 6, 15:18 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 6, 00:00 EST
Scheduled - Scheduled - Maintenance Window: (72-hour duration)

Overview:
Over the next 72 hours, our engineering team will perform rolling kernel updates on a specific group of KVM and webhosting host servers. This maintenance is required to patch the current system base and maintain overall infrastructure security.

Expected Impact:
To minimize disruption, we are updating and rebooting these servers one at a time. If your applications or virtual machines operate on an affected host, you will experience a brief interruption in connectivity when that specific machine restarts to apply the new kernel.

Because this is a rolling update across a 72-hour window, the entire cluster will not go offline at once. We expect downtime for any individual host to be limited to the time it takes to complete a standard reboot.

The following systems are scheduled

storage-kvm10.lax1
storage-kvm6200
storage-kvm6100
storage-kvm6000
storage-kvm5800
storage-kvm5700
storage-kvm15.dfw1
storage-kvm14.dfw1
storage-kvm9.lax1
storage-kvm300
storage-kvm1200
da500
da700
da800
da900
da1000
da1200
da1300
vda1400
vda1500
vda1600
vda1700
vda1800
vda1900
vda2000
vda2100
vda2200
vda2500
vda2600
vda2700
vda2800
vda2900
vda3000
vda3100
vda3200
vda3300
vda3400
vda3500
Nov 5, 20:55 EST

Nov 8, 2026

Nov 7, 2026

No incidents reported.

Nov 6, 2026

Nov 5, 2026

Litespeed Webserver Updates
Completed - The scheduled maintenance has been completed.
Nov 5, 20:51 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 3, 23:05 EST
Scheduled - Litespeed webhosting on shared systems have been updated to
LiteSpeed Web Server (Enterprise) v6.3.7 build 8

Users with litespeed or openlitespeed please update to the following builds
LiteSpeed Web Server (Enterprise) v6.3.7 build 8 or v6.4.0 RC2 build 6
Or
OpenLiteSpeed v1.9.4
Nov 3, 23:04 EST

Nov 4, 2026

No incidents reported.

Nov 3, 2026

Scheduled maintenance for 6 Hyperv servers
Postmortem - Read details
Nov 3, 18:23 EST
Completed - The scheduled maintenance has been completed.
Nov 3, 18:00 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 3, 16:22 EST
Scheduled - We are performing scheduled maintenance for the following servers listed below.

hyperv113.is.cc,
hyperv114.is.cc,
hyperv109.is.cc,
hyperv123.is.cc,
hyperv98.is.cc,
HVplesk9400.is.cc,
hyperv154.is.cc,
hyperv111.is.cc


During this maintenance, downtime is expected to be up to 2-3 hours per server.
Nov 3, 16:00 EST
Upcoming PHP Security update
Resolved - This incident has been resolved.
Nov 3, 09:53 EST
Update - A further security vulnerability was found in PHP and has been assigned CVE-2026-115560. More info at https://www.php.net/archive/2026.php#2026-10-23-1

All webhosting servers have the recommended mitigation enabled.
Oct 28, 19:12 EDT
Update - ea-php (cPanel EasyApache 4) builds with the PHP.net version numbers are now in the stable repositories:
- ea-php82: 8.2.35-1, for CloudLinux OS 7, 8, 9, 10 and CloudLinux OS for Ubuntu 22.04
- ea-php83: 8.3.36-1, for CloudLinux OS 7, 8, 9, 10 and CloudLinux OS for Ubuntu 22.04
- ea-php84: 8.4.27-1, for CloudLinux OS 8, 9, 10 and CloudLinux OS for Ubuntu 22.04
- ea-php85: 8.5.12-1, for CloudLinux OS 8, 9, 10 and CloudLinux OS for Ubuntu 22.04

Previous versions were backported. The new releases show the updated versions.
Oct 24, 08:13 EDT
Update - Update: Security Patches Deployed for PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)

We have deployed security updates across our cPanel, DirectAdmin, and Webuzo hosting environments to address the recent PHP vulnerabilities.

Shared Hosting Proactive Mitigations
Before the official PHP updates were even released, we proactively forced session.upload_progress.enabled=0 across all shared hosting servers as a partial mitigation. We also deployed custom Web Application Firewall (WAF) rules to inspect and protect multi-part uploads against this exploit. These servers are now receiving the full PHP patches as outlined below.

cPanel Servers
For cPanel systems, the fixes are applied as backports. This means your PHP version number will not change to the latest upstream release (for example, ea-php84 remains at 8.4.26 instead of showing 8.4.27).

To confirm the fix is active on a cPanel server, you need to check the package changelog for the CVE IDs rather than looking at the PHP version number. You can verify this via SSH using the following command (replace ea-php84 with your installed version):rpm -q ea-php84-php-cli --changelog | grep -E 'CVE-2026-(109618|109619)'

DirectAdmin Servers
On DirectAdmin, modern PHP branches have been updated to the fully patched upstream releases: 8.5.12, 8.4.27, 8.3.36, and 8.2.35. For older, legacy PHP versions (5.6 through 8.1), the security fixes have been successfully applied as custom patches through CustomBuild.

Webuzo Servers
For Webuzo environments, all PHP packages spanning versions 5.6 through 8.5 are available for updates by logging into webuzo

Manual Workaround for Unmanaged Servers
If you are running an unmanaged server and cannot apply the PHP updates immediately, you can temporarily mitigate the vulnerability by disabling session upload progress. To do this, add or update the following line in your active php.ini file:session.upload_progress.enabled=0 while updates applied.
Oct 22, 07:54 EDT
Update - directadmin legacy and cloudlinux are patched and going through final checks.
Oct 21, 20:14 EDT
Update - directadmin storage systems (with out cloudlinux) have been patched
Oct 21, 20:10 EDT
Update - All cpanel systems ea-php* packages have been updated. However some include back ports such as ea-php84 is 8.4.26, not 8.4.27.
Oct 21, 19:32 EDT
Update - Cpanel has released 8.5.12, 8.4.27, 8.3.36, 8.2.35, along with the backported versions 8.1.34,8.0.30, and 7.4.33 and these are now being applied.
Oct 21, 11:41 EDT
Update - Directadmin custombuild is available: This moves PHP 8.5, 8.4, 8.3, 8.2 to latest version, and adds patches for PHP 8.1, PHP 8.0 and PHP 7.4

Please be aware PHP lower than 7.4 will be removed, if installed through custombuild at this time. PHP selector from cloudlinux will patch via alt-php.
Oct 21, 10:18 EDT
Update - Imunify360 has release ModSecurity ruleset 8.83 which targets the PHP session upload progress handling of multipart requests, plus a telemetry rule to track related activity. All webhosting servers have been verified to be running this version.

Storage directadmin does not offer imunify360. These run modsecurity with owasp ruleset.
Oct 21, 08:27 EDT
Update - On shared hosting systems with in the last few hours
session.upload_progress.enabled = Off
Has been set off with in php.ini as all as in litespeed under the main config file using php_value. This closes a possible part of of the exploit, but officially this mitigation does not come directly from PHP devs.
Oct 21, 07:34 EDT
Update - The official PHP project will likely not provide security patches for versions older than PHP 8.2.

Servers running cPanel or DirectAdmin with CloudLinux utilize HardenedPHP and will receive these patches over time. Standard DirectAdmin servers without CloudLinux do not currently support HardenedPHP, though we are actively consulting with the CloudLinux team to determine if standalone Imunify360 servers can utilize it.

Additionally, if the exploit is within PHP-FPM, servers running LiteSpeed are likely unaffected.

Depending on the severity of the issue, sites on non-CloudLinux systems without HardenedPHP may be required to update to PHP 8.2 or higher, or migrate to a CloudLinux system (which will require an IP address change).
Oct 20, 18:47 EDT
Investigating - An upcoming PHP security update is planned to be released tomorrow - https://www.php.net/archive/2026.php#2026-10-20-1

No further information is available at this time.
Oct 20, 17:27 EDT
KVM25 DFW
Resolved - This incident has been resolved.
Nov 3, 09:53 EST
Monitoring - A fix has been implemented and we are monitoring the results.
Oct 31, 08:42 EDT
Investigating - We are investigating an outage on kvm25 DFW
Oct 31, 06:45 EDT

Nov 2, 2026

Scheduled maintenance for 10 Hyperv servers
Completed - The scheduled maintenance has been completed.
Nov 2, 20:30 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 2, 17:30 EST
Scheduled - We are performing scheduled maintenance for the following servers listed below.

hyperv148.is.cc
hyperv134.is.cc
hyperv133.is.cc
hyperv129.is.cc
hyperv126.is.cc
hyperv71.is.cc
hyperv72.is.cc
hyperv127.is.cc
hyperv122.is.cc
hyperv118.is.cc


During this maintenance, downtime is expected to be up to 2-3 hours per server.
Nov 2, 10:49 EST

Nov 1, 2026

Scheduled Maintenance: Rolling Kernel Updates for Select KVM Hosts
Completed - The scheduled maintenance has been completed.
Nov 1, 08:46 EST
Update - kvm391/webhosting2033 is scheduled for a kernel update.
Oct 30, 13:59 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 29, 09:46 EDT
Update - The kvm536 system is scheduled for a reboot.
Oct 29, 09:46 EDT
Scheduled - Maintenance Window: (72-hour duration)

Overview:
Over the next 72 hours, our engineering team will perform rolling kernel updates on a specific group of KVM host servers. This maintenance is required to patch the current system base and maintain overall infrastructure security.

Expected Impact:
To minimize disruption, we are updating and rebooting these servers one at a time. If your applications or virtual machines operate on an affected host, you will experience a brief interruption in connectivity when that specific machine restarts to apply the new kernel.

Because this is a rolling update across a 72-hour window, the entire cluster will not go offline at once. We expect downtime for any individual host to be limited to the time it takes to complete a standard reboot.
Oct 29, 09:45 EDT

Oct 31, 2026

Oct 30, 2026

kvm558 outage
Resolved - This incident has been resolved.
Oct 30, 13:59 EDT
Investigating - We are investigating an outage on the kvm558 system due to a dos attack.
Oct 30, 11:28 EDT
Incident History Powered by Atlassian Statuspage