Update - kvm578 has been added to the reboot schedule for today.
Oct 22, 2026 - 15:06 EDT
Oct 22, 2026 - 15:06 EDT
Update - The following systems will be completed tomorrow
* kvm539.is.cc - vda
* kvm537.is.cc - vda
* kvm18.dfw1.is.cc
* kvm18.lax1.is.cc
* kvm19.dfw1.is.cc
* kvm19.lax1.is.cc
* kvm20.dfw1.is.cc
* kvm20.lax1.is.cc
Oct 22, 2026 - 13:09 EDT
* kvm539.is.cc - vda
* kvm537.is.cc - vda
* kvm18.dfw1.is.cc
* kvm18.lax1.is.cc
* kvm19.dfw1.is.cc
* kvm19.lax1.is.cc
* kvm20.dfw1.is.cc
* kvm20.lax1.is.cc
Oct 22, 2026 - 13:09 EDT
Update - The next batch of reboots will be
* kvm14.dfw1.is.cc
* kvm15.dfw1.is.cc
* kvm16.dfw1.is.cc
* kvm16.lax1.is.cc
* kvm17.dfw1.is.cc
* kvm17.lax1.is.cc
Oct 22, 2026 - 12:21 EDT
* kvm14.dfw1.is.cc
* kvm15.dfw1.is.cc
* kvm16.dfw1.is.cc
* kvm16.lax1.is.cc
* kvm17.dfw1.is.cc
* kvm17.lax1.is.cc
Oct 22, 2026 - 12:21 EDT
Update - The last batch is completed. The next batch will be
* kvm531.is.cc
* kvm532.is.cc
* kvm533.is.cc
* kvm534.is.cc
* kvm348.is.cc
* kvm23.dfw1.is.cc
Oct 22, 2026 - 09:43 EDT
* kvm531.is.cc
* kvm532.is.cc
* kvm533.is.cc
* kvm534.is.cc
* kvm348.is.cc
* kvm23.dfw1.is.cc
Oct 22, 2026 - 09:43 EDT
Update - The last batch is completed. The next batch will be
* kvm546.is.cc
* kvm547.is.cc
* kvm548.is.cc
* kvm549.is.cc
* kvm550.is.cc
* kvm551.is.cc
Oct 22, 2026 - 08:39 EDT
* kvm546.is.cc
* kvm547.is.cc
* kvm548.is.cc
* kvm549.is.cc
* kvm550.is.cc
* kvm551.is.cc
Oct 22, 2026 - 08:39 EDT
Update - The following nodes are in progress
* kvm540.is.cc
* kvm541.is.cc
* kvm542.is.cc
* kvm543.is.cc
* kvm544.is.cc
* kvm545.is.cc
Oct 22, 2026 - 08:05 EDT
* kvm540.is.cc
* kvm541.is.cc
* kvm542.is.cc
* kvm543.is.cc
* kvm544.is.cc
* kvm545.is.cc
Oct 22, 2026 - 08:05 EDT
Update - The following have been completed
kvm560.is.cc
kvm561.is.cc
kvm562.is.cc
kvm563.is.cc
kvm564.is.cc
kvm565.is.cc
kvm566.is.cc
Oct 21, 2026 - 14:57 EDT
kvm560.is.cc
kvm561.is.cc
kvm562.is.cc
kvm563.is.cc
kvm564.is.cc
kvm565.is.cc
kvm566.is.cc
Oct 21, 2026 - 14:57 EDT
Update - The following have been completed
kvm568.is.cc
kvm569.is.cc
kvm570.is.cc
kvm571.is.cc
kvm558.is.cc
kvm559.is.cc
Oct 21, 2026 - 13:51 EDT
kvm568.is.cc
kvm569.is.cc
kvm570.is.cc
kvm571.is.cc
kvm558.is.cc
kvm559.is.cc
Oct 21, 2026 - 13:51 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 21, 2026 - 11:00 EDT
Oct 21, 2026 - 11:00 EDT
Scheduled - Maintenance Window: (72-hour duration)
Overview:
Over the next 72 hours, our engineering team will perform rolling kernel updates on a specific group of KVM host servers. This maintenance is required to patch the current system base and maintain overall infrastructure security.
Expected Impact:
To minimize disruption, we are updating and rebooting these servers one at a time. If your applications or virtual machines operate on an affected host, you will experience a brief interruption in connectivity when that specific machine restarts to apply the new kernel.
Because this is a rolling update across a 72-hour window, the entire cluster will not go offline at once. We expect downtime for any individual host to be limited to the time it takes to complete a standard reboot.
Affected Systems:
kvm568.is.cc
kvm569.is.cc
kvm570.is.cc
kvm571.is.cc
kvm558.is.cc
kvm559.is.cc
kvm560.is.cc
kvm561.is.cc
kvm562.is.cc
kvm563.is.cc
kvm564.is.cc
kvm565.is.cc
kvm566.is.cc
kvm539.is.cc
kvm540.is.cc
kvm541.is.cc
kvm542.is.cc
kvm543.is.cc
kvm544.is.cc
kvm545.is.cc
kvm546.is.cc
kvm547.is.cc
kvm548.is.cc
kvm549.is.cc
kvm550.is.cc
kvm551.is.cc
kvm531.is.cc
kvm532.is.cc
kvm533.is.cc
kvm534.is.cc
kvm537.is.cc
kvm348.is.cc
kvm23.dfw1.is.cc
kvm14.dfw1.is.cc
kvm15.dfw1.is.cc
kvm16.dfw1.is.cc
kvm16.lax1.is.cc
kvm17.dfw1.is.cc
kvm17.lax1.is.cc
kvm18.dfw1.is.cc
kvm18.lax1.is.cc
kvm19.dfw1.is.cc
kvm19.lax1.is.cc
kvm20.dfw1.is.cc
kvm20.lax1.is.cc
Oct 21, 2026 11:00 - Oct 24, 2026 11:00 EDT
Overview:
Over the next 72 hours, our engineering team will perform rolling kernel updates on a specific group of KVM host servers. This maintenance is required to patch the current system base and maintain overall infrastructure security.
Expected Impact:
To minimize disruption, we are updating and rebooting these servers one at a time. If your applications or virtual machines operate on an affected host, you will experience a brief interruption in connectivity when that specific machine restarts to apply the new kernel.
Because this is a rolling update across a 72-hour window, the entire cluster will not go offline at once. We expect downtime for any individual host to be limited to the time it takes to complete a standard reboot.
Affected Systems:
kvm568.is.cc
kvm569.is.cc
kvm570.is.cc
kvm571.is.cc
kvm558.is.cc
kvm559.is.cc
kvm560.is.cc
kvm561.is.cc
kvm562.is.cc
kvm563.is.cc
kvm564.is.cc
kvm565.is.cc
kvm566.is.cc
kvm539.is.cc
kvm540.is.cc
kvm541.is.cc
kvm542.is.cc
kvm543.is.cc
kvm544.is.cc
kvm545.is.cc
kvm546.is.cc
kvm547.is.cc
kvm548.is.cc
kvm549.is.cc
kvm550.is.cc
kvm551.is.cc
kvm531.is.cc
kvm532.is.cc
kvm533.is.cc
kvm534.is.cc
kvm537.is.cc
kvm348.is.cc
kvm23.dfw1.is.cc
kvm14.dfw1.is.cc
kvm15.dfw1.is.cc
kvm16.dfw1.is.cc
kvm16.lax1.is.cc
kvm17.dfw1.is.cc
kvm17.lax1.is.cc
kvm18.dfw1.is.cc
kvm18.lax1.is.cc
kvm19.dfw1.is.cc
kvm19.lax1.is.cc
kvm20.dfw1.is.cc
kvm20.lax1.is.cc
Oct 21, 2026 11:00 - Oct 24, 2026 11:00 EDT
Update - Update: Security Patches Deployed for PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
We have deployed security updates across our cPanel, DirectAdmin, and Webuzo hosting environments to address the recent PHP vulnerabilities.
Shared Hosting Proactive Mitigations
Before the official PHP updates were even released, we proactively forced session.upload_progress.enabled=0 across all shared hosting servers as a partial mitigation. We also deployed custom Web Application Firewall (WAF) rules to inspect and protect multi-part uploads against this exploit. These servers are now receiving the full PHP patches as outlined below.
cPanel Servers
For cPanel systems, the fixes are applied as backports. This means your PHP version number will not change to the latest upstream release (for example, ea-php84 remains at 8.4.26 instead of showing 8.4.27).
To confirm the fix is active on a cPanel server, you need to check the package changelog for the CVE IDs rather than looking at the PHP version number. You can verify this via SSH using the following command (replace ea-php84 with your installed version):rpm -q ea-php84-php-cli --changelog | grep -E 'CVE-2026-(109618|109619)'
DirectAdmin Servers
On DirectAdmin, modern PHP branches have been updated to the fully patched upstream releases: 8.5.12, 8.4.27, 8.3.36, and 8.2.35. For older, legacy PHP versions (5.6 through 8.1), the security fixes have been successfully applied as custom patches through CustomBuild.
Webuzo Servers
For Webuzo environments, all PHP packages spanning versions 5.6 through 8.5 are available for updates by logging into webuzo
Manual Workaround for Unmanaged Servers
If you are running an unmanaged server and cannot apply the PHP updates immediately, you can temporarily mitigate the vulnerability by disabling session upload progress. To do this, add or update the following line in your active php.ini file:session.upload_progress.enabled=0 while updates applied.
Oct 22, 2026 - 07:54 EDT
We have deployed security updates across our cPanel, DirectAdmin, and Webuzo hosting environments to address the recent PHP vulnerabilities.
Shared Hosting Proactive Mitigations
Before the official PHP updates were even released, we proactively forced session.upload_progress.enabled=0 across all shared hosting servers as a partial mitigation. We also deployed custom Web Application Firewall (WAF) rules to inspect and protect multi-part uploads against this exploit. These servers are now receiving the full PHP patches as outlined below.
cPanel Servers
For cPanel systems, the fixes are applied as backports. This means your PHP version number will not change to the latest upstream release (for example, ea-php84 remains at 8.4.26 instead of showing 8.4.27).
To confirm the fix is active on a cPanel server, you need to check the package changelog for the CVE IDs rather than looking at the PHP version number. You can verify this via SSH using the following command (replace ea-php84 with your installed version):rpm -q ea-php84-php-cli --changelog | grep -E 'CVE-2026-(109618|109619)'
DirectAdmin Servers
On DirectAdmin, modern PHP branches have been updated to the fully patched upstream releases: 8.5.12, 8.4.27, 8.3.36, and 8.2.35. For older, legacy PHP versions (5.6 through 8.1), the security fixes have been successfully applied as custom patches through CustomBuild.
Webuzo Servers
For Webuzo environments, all PHP packages spanning versions 5.6 through 8.5 are available for updates by logging into webuzo
Manual Workaround for Unmanaged Servers
If you are running an unmanaged server and cannot apply the PHP updates immediately, you can temporarily mitigate the vulnerability by disabling session upload progress. To do this, add or update the following line in your active php.ini file:session.upload_progress.enabled=0 while updates applied.
Oct 22, 2026 - 07:54 EDT
Update - directadmin legacy and cloudlinux are patched and going through final checks.
Oct 21, 2026 - 20:14 EDT
Oct 21, 2026 - 20:14 EDT
Update - directadmin storage systems (with out cloudlinux) have been patched
Oct 21, 2026 - 20:10 EDT
Oct 21, 2026 - 20:10 EDT
Update - All cpanel systems ea-php* packages have been updated. However some include back ports such as ea-php84 is 8.4.26, not 8.4.27.
Oct 21, 2026 - 19:32 EDT
Oct 21, 2026 - 19:32 EDT
Update - Cpanel has released 8.5.12, 8.4.27, 8.3.36, 8.2.35, along with the backported versions 8.1.34,8.0.30, and 7.4.33 and these are now being applied.
Oct 21, 2026 - 11:41 EDT
Oct 21, 2026 - 11:41 EDT
Update - Directadmin custombuild is available: This moves PHP 8.5, 8.4, 8.3, 8.2 to latest version, and adds patches for PHP 8.1, PHP 8.0 and PHP 7.4
Please be aware PHP lower than 7.4 will be removed, if installed through custombuild at this time. PHP selector from cloudlinux will patch via alt-php.
Oct 21, 2026 - 10:18 EDT
Please be aware PHP lower than 7.4 will be removed, if installed through custombuild at this time. PHP selector from cloudlinux will patch via alt-php.
Oct 21, 2026 - 10:18 EDT
Update - Imunify360 has release ModSecurity ruleset 8.83 which targets the PHP session upload progress handling of multipart requests, plus a telemetry rule to track related activity. All webhosting servers have been verified to be running this version.
Storage directadmin does not offer imunify360. These run modsecurity with owasp ruleset.
Oct 21, 2026 - 08:27 EDT
Storage directadmin does not offer imunify360. These run modsecurity with owasp ruleset.
Oct 21, 2026 - 08:27 EDT
Update - On shared hosting systems with in the last few hours
session.upload_progress.enabled = Off
Has been set off with in php.ini as all as in litespeed under the main config file using php_value. This closes a possible part of of the exploit, but officially this mitigation does not come directly from PHP devs.
Oct 21, 2026 - 07:34 EDT
session.upload_progress.enabled = Off
Has been set off with in php.ini as all as in litespeed under the main config file using php_value. This closes a possible part of of the exploit, but officially this mitigation does not come directly from PHP devs.
Oct 21, 2026 - 07:34 EDT
Update - The official PHP project will likely not provide security patches for versions older than PHP 8.2.
Servers running cPanel or DirectAdmin with CloudLinux utilize HardenedPHP and will receive these patches over time. Standard DirectAdmin servers without CloudLinux do not currently support HardenedPHP, though we are actively consulting with the CloudLinux team to determine if standalone Imunify360 servers can utilize it.
Additionally, if the exploit is within PHP-FPM, servers running LiteSpeed are likely unaffected.
Depending on the severity of the issue, sites on non-CloudLinux systems without HardenedPHP may be required to update to PHP 8.2 or higher, or migrate to a CloudLinux system (which will require an IP address change).
Oct 20, 2026 - 18:47 EDT
Servers running cPanel or DirectAdmin with CloudLinux utilize HardenedPHP and will receive these patches over time. Standard DirectAdmin servers without CloudLinux do not currently support HardenedPHP, though we are actively consulting with the CloudLinux team to determine if standalone Imunify360 servers can utilize it.
Additionally, if the exploit is within PHP-FPM, servers running LiteSpeed are likely unaffected.
Depending on the severity of the issue, sites on non-CloudLinux systems without HardenedPHP may be required to update to PHP 8.2 or higher, or migrate to a CloudLinux system (which will require an IP address change).
Oct 20, 2026 - 18:47 EDT
Investigating - An upcoming PHP security update is planned to be released tomorrow - https://www.php.net/archive/2026.php#2026-10-20-1
No further information is available at this time.
Oct 20, 2026 - 17:27 EDT
No further information is available at this time.
Oct 20, 2026 - 17:27 EDT
About This Site
Interserver Status Page
my
Operational
Management Portal
Operational
Datacenters
Operational
TEB2
Operational
TEB4
Operational
TEB5
Operational
TEB6
Operational
Equinix NY4
Operational
Equinix LAX1
Operational
LAX2
Operational
TEB7
Operational
Network
Operational
Network
Operational
Services
Operational
Webhosting
Operational
Storage
Operational
VPS
Operational
Mailbaby
Operational
Scrub
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
