Elitehost incident
Node.js Security Vulnerabilities Patched
Ongoing since 12:03 PM UTC, affecting Web Hosting Services.
Security updates addressing Node.js vulnerabilities, including CVE-2026-111497, have been installed across all our hosting servers for all versions we provide through Node.js Selector (Setup Node.js App in cPanel). Node.js 22, 24 and 26 have been updated to 22.23.4, 24.22.1 and 26.12.1\. Versions 10, 12, 14, 16, 18, 19 and 20 have received vendor-provided backported security fixes. Older Node.js versions retain their existing release numbers because CloudLinux has backported the security fixes into updated package builds. All Node.js applications have been restarted to ensure the patched runtime is active. No action is required from your side. We recommend keeping your application and its dependencies updated and using an actively supported Node.js version (Node.js 22 or later).
Affected components
Update timeline
- monitoring Oct 23, 2026, 12:03 PM UTC
Security updates addressing Node.js vulnerabilities, including CVE-2026-111497, have been installed across all our hosting servers for all versions we provide through Node.js Selector (Setup Node.js App in cPanel). Node.js 22, 24 and 26 have been updated to 22.23.4, 24.22.1 and 26.12.1\. Versions 10, 12, 14, 16, 18, 19 and 20 have received vendor-provided backported security fixes. Older Node.js versions retain their existing release numbers because CloudLinux has backported the security fixes into updated package builds. All Node.js applications have been restarted to ensure the patched runtime is active. No action is required from your side. We recommend keeping your application and its dependencies updated and using an actively supported Node.js version (Node.js 22 or later).
Your product runs on more than Elitehost
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services