Ongoing since 09:21 PM UTC, affecting NZ – AKL01 and NZ – AKL01 and 1 more.
We are continuing to work on a fix for this issue.
Affected components
Update timeline
- identified Oct 26, 2026, 09:21 PM UTC
Node2Shell (CVE-2026-111497) is a high-severity vulnerability. Current versions affected are 22.x, 24.x, and 26.x. Patched Cloud Container images are available and we recommend upgrading as soon as possible. Otherwise we will roll upgrades for all affected Cloud Containers (managed or unmanaged) today. This will happen alongside the latest round of PHP patching. Following this work we will move on to patching managed servers (virtual and dedicated). If you run unmanaged servers, please run your own updates as soon as you can.
- identified Oct 26, 2026, 09:28 PM UTC
We are continuing to work on a fix for this issue.
Your product runs on more than SiteHost
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services