AllHost incident

CVE-2026-99999

Resolved after 4 days, affecting cp2 - cPanel Shared Web Hosting and web0 - cPanel Shared Hosting and 1 more, on October 16, 2026.

completed Oct 20, 2026, 11:00 PM UTC

Maintenance ended

Started
Oct 16, 2026, 11:00 PM UTC
Resolved
Oct 20, 2026, 11:00 PM UTC
Duration
4d
Detected by Pingoru
Oct 16, 2026, 11:00 PM UTC

Affected components

cp2 - cPanel Shared Web Hostingweb0 - cPanel Shared HostingVPS Host: LON-1415VPS Host: LON-1416VPS Host: UK-606VPS Host: UK-BE01VPS Host: UK-SRV3VPS Host: UK-SRV4VPS Host: UK-MC01VPS Host: UK-MC03

Update timeline

  1. in progress Oct 16, 2026, 11:00 PM UTC

    We are aware of CVE-2026-99999, a critical Linux kernel vulnerability (CVSS 9.3) that was publicly disclosed on 15 October 2026. It affects the underlying systems for all customers. We are working to patch our servers as quickly as possible, with fixes deployed as they become available via upstream repositories. Customers should expect their services to restart during this period. We will keep interruptions as brief as possible.

  2. completed Oct 20, 2026, 11:00 PM UTC

    Maintenance ended

  3. resolved Oct 20, 2026, 11:00 PM UTC

    Maintenance completed

Your product runs on more than AllHost

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →