Resolved after 1 day 20 hours, affecting cPanel Management and cPanel Email Services and 1 more, on October 21, 2026.
The PHP patch has been applied to all affected cPanel servers and the temporary mitigations have been removed. Services are operating normally at the moment.
Affected components
Update timeline
- investigating Oct 21, 2026, 05:44 AM UTC
We are aware of reports regarding a recently disclosed PHP vulnerability affecting PHP installations globally. As a precautionary measure, TPP has implemented protective controls across relevant systems while our Infrastructure team continues to assess the situation and monitor vendor guidance. These measures may temporarily impact some functionality; however, they have been implemented to reduce potential security risk. At this time, there is no evidence of any impact to TPP systems or customer data. Further updates will be provided if there are any material developments.
- monitoring Oct 22, 2026, 01:34 AM UTC
Update: All cPanel hosting servers have now been patched against the recently disclosed PHP vulnerability. The temporary mitigation measures previously implemented remain in place while we validate the vendor fixes and restore affected functionality. We are actively working to remove these controls as quickly and safely as possible. Further updates will be provided as restoration activities progress.
- monitoring Oct 22, 2026, 07:15 AM UTC
The PHP patch has been applied to all affected cPanel servers and the temporary mitigations have been removed. Services are operating normally at the moment.
- resolved Oct 23, 2026, 01:47 AM UTC
This incident has been resolved.
Your product runs on more than TPP Wholesale
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.