Resolved after 12 days 20 hours, affecting Amsterdam, NL and Frankfurt, DE and 1 more, on May 5, 2026.
We are aware of the recently disclosed Apache HTTP/2 vulnerability (CVE-2026-23918) affecting certain Apache configurations with HTTP/2 enabled. Our actively maintained hosting infrastructure has already received the necessary security updates through normal update channels where applicable. For older or legacy systems that cannot immediately be upgraded, HTTP/2 mitigation steps are available. At this time, we are not aware of any active exploitation affecting StableHost-managed infrastructure. This vulnerability is applicable only to cPanel/Linux hosting customers, both Shared and VPS. Additional details, impact information, and mitigation instructions can be found in the following knowledgebase article: https://support.stablehost.com/en/articles/14984554-critical-apache-http-2-vulnerability-cve-2026-23918 We will continue monitoring the situation and provide further updates if necessary.
Affected components
Update timeline
- monitoring May 05, 2026, 10:23 PM UTC
We are aware of the recently disclosed Apache HTTP/2 vulnerability (CVE-2026-23918) affecting certain Apache configurations with HTTP/2 enabled. Our actively maintained hosting infrastructure has already received the necessary security updates through normal update channels where applicable. For older or legacy systems that cannot immediately be upgraded, HTTP/2 mitigation steps are available. At this time, we are not aware of any active exploitation affecting StableHost-managed infrastructure. This vulnerability is applicable only to cPanel/Linux hosting customers, both Shared and VPS. Additional details, impact information, and mitigation instructions can be found in the following knowledgebase article: https://support.stablehost.com/en/articles/14984554-critical-apache-http-2-vulnerability-cve-2026-23918 We will continue monitoring the situation and provide further updates if necessary.
- resolved May 18, 2026, 06:41 PM UTC
This incident has been resolved.
Your product runs on more than Stable Host
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services