Elitehost Outage History

Started Oct 23, 2026, 12:03 PM UTC· resolved Oct 27, 2026, 08:50 AM UTC

1. monitoring Oct 23, 2026, 12:03 PM UTC

   Security updates addressing Node.js vulnerabilities, including CVE-2026-111497, have been installed across all our hosting servers for all versions we provide through Node.js Selector (Setup Node.js App in cPanel). Node.js 22, 24 and 26 have been updated to 22.23.4, 24.22.1 and 26.12.1\. Versions 10, 12, 14, 16, 18, 19 and 20 have received vendor-provided backported security fixes. Older Node.js versions retain their existing release numbers because CloudLinux has backported the security fixes into updated package builds. All Node.js applications have been restarted to ensure the patched runtime is active. No action is required from your side. We recommend keeping your application and its dependencies updated and using an actively supported Node.js version (Node.js 22 or later)..

2. monitoring Oct 23, 2026, 12:03 PM UTC

   Security updates addressing Node.js vulnerabilities, including CVE-2026-111497, have been installed across all our hosting servers for all versions we provide through Node.js Selector (Setup Node.js App in cPanel). Node.js 22, 24 and 26 have been updated to 22.23.4, 24.22.1 and 26.12.1\. Versions 10, 12, 14, 16, 18, 19 and 20 have received vendor-provided backported security fixes. Older Node.js versions retain their existing release numbers because CloudLinux has backported the security fixes into updated package builds. All Node.js applications have been restarted to ensure the patched runtime is active. No action is required from your side. We recommend keeping your application and its dependencies updated and using an actively supported Node.js version (Node.js 22 or later).

3. resolved Oct 27, 2026, 08:50 AM UTC

   This incident has been resolved..

4. resolved Oct 27, 2026, 08:50 AM UTC

   This incident has been resolved.

Read the full incident report →

Started Oct 22, 2026, 09:31 AM UTC· resolved Nov 02, 2026, 10:44 AM UTC

1. monitoring Oct 22, 2026, 09:31 AM UTC

   Security updates addressing PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 have already been applied across all our hosting servers, including backported fixes for older PHP versions. * **Proactive Exposure Reduction:** On the morning of 21 October, prior to official vendor patch releases, temporary mitigations were immediately deployed across all servers, including disabling PHP's session upload progress feature. * **Firewall Rule Deployment:** Updated Imunify360 Web Application Firewall (WAF) rules were applied server-wide to actively detect and block known exploit vectors. * **PHP Updates:** Official security updates from cPanel and CloudLinux, including backported fixes for legacy PHP releases, have been installed. * **Version Display Notice:** Software or command-line version checks (e.g., php -v display existing release numbers such as PHP 8.4.26) because CloudLinux backported the security patches directly without incrementing the release number. The package build timestamp of 21 October 2026 and our internal verification confirm that all security patches are active. We apologise for any confusion this may cause. No action is required from your side. However, we recommend keeping your site's applications, plugins and themes updated, and using an actively supported PHP version (PHP 8.2 or later)..

2. monitoring Oct 22, 2026, 09:31 AM UTC

   Security updates addressing PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 have already been applied across all our hosting servers, including backported fixes for older PHP versions. * **Proactive Exposure Reduction:** On the morning of 21 October, prior to official vendor patch releases, temporary mitigations were immediately deployed across all servers, including disabling PHP's session upload progress feature. * **Firewall Rule Deployment:** Updated Imunify360 Web Application Firewall (WAF) rules were applied server-wide to actively detect and block known exploit vectors. * **PHP Updates:** Official security updates from cPanel and CloudLinux, including backported fixes for legacy PHP releases, have been installed. * **Version Display Notice:** Software or command-line version checks (e.g., php -v display existing release numbers such as PHP 8.4.26) because CloudLinux backported the security patches directly without incrementing the release number. The package build timestamp of 21 October 2026 and our internal verification confirm that all security patches are active. We apologise for any confusion this may cause. No action is required from your side. However, we recommend keeping your site's applications, plugins and themes updated, and using an actively supported PHP version (PHP 8.2 or later).

3. monitoring Oct 23, 2026, 02:03 AM UTC

   Updated CloudLinux alt-php packages (used by PHP Selector) have been released and installed across all our hosting servers. These builds now match the official PHP release versions: 8.2.35, 8.3.36, 8.4.27 and 8.5.12. These replace the previously installed backported builds, which already addressed CVE-2026-109618 and CVE-2026-109619\. Older PHP versions remain patched through vendor-provided backports..

4. monitoring Oct 23, 2026, 02:03 AM UTC

   Updated CloudLinux alt-php packages (used by PHP Selector) have been released and installed across all our hosting servers. These builds now match the official PHP release versions: 8.2.35, 8.3.36, 8.4.27 and 8.5.12. These replace the previously installed backported builds, which already addressed CVE-2026-109618 and CVE-2026-109619\. Older PHP versions remain patched through vendor-provided backports.

5. resolved Oct 23, 2026, 12:16 PM UTC

   This incident has been resolved.

6. resolved Nov 02, 2026, 10:44 AM UTC

   This incident has been resolved..

7. resolved Nov 02, 2026, 10:44 AM UTC

   This incident has been resolved.

Read the full incident report →

Started Jul 08, 2026, 10:02 PM UTC· resolved Jul 08, 2026, 10:54 PM UTC

1. investigating Jul 08, 2026, 10:02 PM UTC

   We are currently experiencing an issue affecting cPanel license validation on some servers, which may result in an "Invalid License File" message being displayed within cPanel or WHM. Our licenses remain valid and active. Initial findings indicate a communication issue with cPanel's licensing servers affecting multiple hosting providers. We are actively working to resolve the issue and will provide further updates as information becomes available..

2. investigating Jul 08, 2026, 10:02 PM UTC

   We are currently experiencing an issue affecting cPanel license validation on some servers, which may result in an "Invalid License File" message being displayed within cPanel or WHM. Our licenses remain valid and active. Initial findings indicate a communication issue with cPanel's licensing servers affecting multiple hosting providers. We are actively working to resolve the issue and will provide further updates as information becomes available.

3. identified Jul 08, 2026, 10:37 PM UTC

   cPanel has acknowledged a widespread issue affecting their licensing infrastructure: [cPanel License Update Failures - July 8th 2026](https://support.cpanel.net/hc/en-us/articles/41816676353943-cPanel-License-Update-Failures-July-8th-2026?utm%5Fsource=chatgpt.com) In addition to the licensing errors, we are also observing email authentication issues on some servers, which appear to be related to a cPanel update released over the past few hours. We continue to monitor the situation closely and are working with cPanel towards a resolution. Further updates will be provided as additional information becomes available..

4. identified Jul 08, 2026, 10:37 PM UTC

   cPanel has acknowledged a widespread issue affecting their licensing infrastructure: [cPanel License Update Failures - July 8th 2026](https://support.cpanel.net/hc/en-us/articles/41816676353943-cPanel-License-Update-Failures-July-8th-2026?utm%5Fsource=chatgpt.com) In addition to the licensing errors, we are also observing email authentication issues on some servers, which appear to be related to a cPanel update released over the past few hours. We continue to monitor the situation closely and are working with cPanel towards a resolution. Further updates will be provided as additional information becomes available.

5. resolved Jul 08, 2026, 10:54 PM UTC

   The issue affecting cPanel license validation and mail authentication services has been resolved. cPanel has confirmed that the issue with their licensing infrastructure has been mitigated and license renewals are now processing normally. We have verified that licensing and mail authentication services have recovered across all affected servers. We apologise for any inconvenience caused..

6. resolved Jul 08, 2026, 10:54 PM UTC

   The issue affecting cPanel license validation and mail authentication services has been resolved. cPanel has confirmed that the issue with their licensing infrastructure has been mitigated and license renewals are now processing normally. We have verified that licensing and mail authentication services have recovered across all affected servers. We apologise for any inconvenience caused.

Read the full incident report →

Started May 18, 2026, 01:13 PM UTC· resolved May 19, 2026, 08:46 AM UTC

1. identified May 18, 2026, 01:13 PM UTC

   We are currently experiencing degraded international network connectivity due to a large-scale DDoS attack affecting one of our upstream providers. This is causing intermittent packet loss and increased latency on some international routes. The provider has enabled DDoS scrubbing and mitigation systems, however intermittent packet loss is still being experienced while mitigation remains active. Local South African connectivity is largely unaffected at this stage, however some international destinations and services may experience increased latency, slow connectivity, packet loss, or intermittent timeouts. Our upstream provider is actively working on additional mitigation measures to stabilise connectivity. We are continuing to monitor the situation closely. We apologise for the inconvenience and will provide further updates as more information becomes available..

2. identified May 18, 2026, 01:13 PM UTC

   We are currently experiencing degraded international network connectivity due to a large-scale DDoS attack affecting one of our upstream providers. This is causing intermittent packet loss and increased latency on some international routes. The provider has enabled DDoS scrubbing and mitigation systems, however intermittent packet loss is still being experienced while mitigation remains active. Local South African connectivity is largely unaffected at this stage, however some international destinations and services may experience increased latency, slow connectivity, packet loss, or intermittent timeouts. Our upstream provider is actively working on additional mitigation measures to stabilise connectivity. We are continuing to monitor the situation closely. We apologise for the inconvenience and will provide further updates as more information becomes available.

3. monitoring May 18, 2026, 01:53 PM UTC

   The affected upstream provider has now been disabled and network stability has improved significantly. We are continuing to monitor the situation closely..

4. monitoring May 18, 2026, 01:53 PM UTC

   The affected upstream provider has now been disabled and network stability has improved significantly. We are continuing to monitor the situation closely.

5. resolved May 19, 2026, 08:46 AM UTC

   The international connectivity issue has been resolved and network stability has returned to normal..

6. resolved May 19, 2026, 08:46 AM UTC

   The international connectivity issue has been resolved and network stability has returned to normal.

Read the full incident report →

Started Nov 18, 2025, 12:00 PM UTC· resolved Nov 19, 2025, 01:49 AM UTC

1. identified Nov 18, 2025, 12:00 PM UTC

   We are aware of an ongoing Cloudflare incident that is affecting access to websites that rely on Cloudflare, including our main website and Client Area. Cloudflare has confirmed the issue and is actively working on a fix. You can follow the incident on the [Cloudflare Status Page.](https://www.cloudflarestatus.com/incidents/8gmgl950y3h7)

2. identified Nov 18, 2025, 12:00 PM UTC

   We are aware of an ongoing Cloudflare incident that is affecting access to websites that rely on Cloudflare, including our main website and Client Area. Cloudflare has confirmed the issue and is actively working on a fix. You can follow the incident on the [Cloudflare Status Page.](https://www.cloudflarestatus.com/incidents/8gmgl950y3h7).

3. resolved Nov 18, 2025, 02:48 PM UTC

   Cloudflare has reported that a fix has been implemented and they believe the incident is now resolved. As per their latest update, they are continuing to monitor for errors to ensure all services are back to normal..

4. resolved Nov 18, 2025, 02:48 PM UTC

   Cloudflare has reported that a fix has been implemented and they believe the incident is now resolved. As per their latest update, they are continuing to monitor for errors to ensure all services are back to normal.

5. resolved Nov 19, 2025, 01:49 AM UTC

   This incident has been resolved. More details are available in Cloudflare's [**post-incident report**](https://blog.cloudflare.com/18-november-2025-outage/)..

6. resolved Nov 19, 2025, 01:49 AM UTC

   This incident has been resolved. More details are available in Cloudflare's [**post-incident report**](https://blog.cloudflare.com/18-november-2025-outage/).

Read the full incident report →

Started Oct 22, 2025, 09:35 AM UTC· resolved Oct 22, 2026, 03:14 AM UTC

1. resolved Oct 22, 2025, 09:35 AM UTC

   We are marking this incident as closed due to its age. Please continue to report any suspicious emails to our support team..

2. identified Dec 10, 2025, 08:39 AM UTC

   We are aware of a new phishing campaign targeting our clients with emails using the subject line: "**Auto-Renew Payment Failed – Quick Fix Inside**" or other renewal and expiration notices. These fraudulent emails may appear to come from Elitehost and often use subjects about renewals or expirations to trick recipients. **Please do not click on any links in these emails** and delete the emails immediately**.** They are designed to impersonate our brand and gain unauthorised access to sensitive information by directing you to fraudulent websites that request personal or payment details. To help you identify genuine Elitehost communications, all renewal and Client Area emails now include a banner with our logo and a "View email online" link in the top-right corner. This link will always direct you to our official Client Area: If you are ever uncertain about the authenticity of an email, you can log in directly to the Client Area to view your services or check the history of emails sent to you: Thank you for staying vigilant and helping us maintain a secure online environment..

3. identified Dec 10, 2025, 08:39 AM UTC

   We are aware of a new phishing campaign targeting our clients with emails using the subject line: "**Auto-Renew Payment Failed – Quick Fix Inside**" or other renewal and expiration notices. These fraudulent emails may appear to come from Elitehost and often use subjects about renewals or expirations to trick recipients. **Please do not click on any links in these emails** and delete the emails immediately**.** They are designed to impersonate our brand and gain unauthorised access to sensitive information by directing you to fraudulent websites that request personal or payment details. To help you identify genuine Elitehost communications, all renewal and Client Area emails now include a banner with our logo and a "View email online" link in the top-right corner. This link will always direct you to our official Client Area: If you are ever uncertain about the authenticity of an email, you can log in directly to the Client Area to view your services or check the history of emails sent to you: Thank you for staying vigilant and helping us maintain a secure online environment.

4. resolved Oct 22, 2026, 09:35 AM UTC

   We are marking this incident as closed due to its age. Please continue to report any suspicious emails to our support team.

Read the full incident report →

Started Nov 11, 2024, 09:54 AM UTC· resolved Nov 11, 2024, 11:07 PM UTC

1. investigating Nov 11, 2024, 09:54 AM UTC

   We are currently investigating an issue with cp63\. We aim to restore services as soon as possible. We apologise for the inconvenience..

2. identified Nov 11, 2024, 01:14 PM UTC

   We have identified an issue with the server not loading the kernel correctly, preventing it from booting. Attempts to repair the issue are not working as expected. We are working with the upstream software provider to further troubleshoot and rectify the issue. We hope to have the server online as soon as possible. We apologise for any inconvenience experienced..

3. monitoring Nov 11, 2024, 01:29 PM UTC

   The issue has been resolved and services are back online. We apologise for any inconvenience experienced..

4. monitoring Nov 11, 2024, 10:47 PM UTC

   We’re currently performing maintenance to fix the recent kernel loading issue. This work will help ensure long-term stability and prevent similar issues in the future..

5. resolved Nov 11, 2024, 11:07 PM UTC

   The maintenance has been completed, and all services are back online. Thank you for your patience. We apologise for any inconvenience caused .

Read the full incident report →