Contabo incident

Shared web hosting (cPanel) suspended due to PHP vulnerabilities

Minor Ongoing View vendor source →

Contabo is currently experiencing a minor incident, which began 3h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 11:00 AM UTC
Resolved
Ongoing
Duration
● 2h 48m
Detected by Pingoru
Oct 21, 2026, 11:00 AM UTC

Update timeline

  1. investigating Oct 21, 2026, 11:00 AM UTC

    Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) are being actively exploited. As a precaution, we have suspended our shared web hosting (cPanel) until it is patched. Hosted websites and the cPanel interface are unavailable. We have no evidence that customer data or systems have been affected. Not affected: Running servers, VPS (including cloud-init installations), VDS, storage and other services continue as normal. Email sending and receiving should still work, although webmail is not accessible. If you run PHP applications on your own Contabo services, apply the PHP security update as soon as it is available. Configuration workarounds are ineffective. Please do not open Support tickets for this matter at the moment. Web hosting will be restored once the patch is applied and verified. We will update this page as soon as we have news.