Digital Pacific Incident History

1. monitoringOct 23 · 07:28 UTC

   Dear Customer, We’d like to clarify that some customers may still see PHP version numbers such as 8.2.34, even after the security patching has been completed. This is expected for servers running CloudLinux. CloudLinux has applied the required security fixes to its existing PHP packages without necessarily changing the version number. As a result, your PHP version may appear older than the fixed versions listed in the official PHP announcements, but the security fix for CVE-2026-109618 and CVE-2026-109619 is already included. For example, CloudLinux’s PHP 8.2.34 package includes the required security fix, so upgrading specifically to PHP 8.2.35 is not necessary to address these vulnerabilities. Our teams continue to monitor the environment. Thank you for your patience and understanding as we continue to keep your hosting environment secure.

Reported by Digital Pacific on their status page.

1. monitoringOct 22 · 16:56 UTC

   On 21 October 2026, two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were reported. These vulnerabilities could potentially allow attackers to execute code on a web server without authentication. Our security and infrastructure teams are actively working to address these vulnerabilities across our managed VPS and Dedicated Server environments. We have applied the relevant security updates to servers where patched PHP packages are available. Security fixes may not be available for some older PHP versions, particularly those that have reached end of life, and updates may not be released for these versions in the future. What do you need to do? No immediate action is required if your websites are using latest PHP versions and the server has been updated. If you have concerns about your server's patch status, please contact our support team for assistance. If you notice unusual activity, such as unexpected redirects, unfamiliar administrator accounts, unknown files, high CPU usage or outbound spam, please contact our support team immediately. If your websites are running on older PHP versions (anything below php 8.1), we recommend updating your websites to be compatible with the latest supported PHP versions and upgrading the PHP version on your server accordingly. If you encounter any challenges updating your website or need assistance with the process, please feel free to contact our support team. We’ll be happy to help. We continue to monitor the situation and will share further updates as more information becomes available. Thank you for your patience and understanding as we work to keep your hosting environment secure.

Reported by Digital Pacific on their status page.

1. monitoringOct 22 · 04:58 UTC

   Dear Customers, We would like to bring to your attention two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may affect PHP installations on your servers. If you are using a self-managed VPS or Dedicated Server, we recommend reviewing your installed PHP version and applying the relevant security updates as advised by your PHP distribution or operating system provider. What you need to do: Review the PHP versions installed on your server to determine whether they are affected. If your installation is affected, apply the appropriate security updates following your operating system, control panel's recommendations. If your websites are running on older PHP versions (anything below php 8.1), we recommend updating your websites to be compatible with the latest supported PHP versions and upgrading the PHP version on your server accordingly. If you are unsure how to proceed, consult your system administrator or contact our support team for guidance. Please note: For self-managed VPS and Dedicated Servers, maintaining server software and applying security updates are the customer's responsibility. We recommend addressing this advisory promptly to help protect your server and hosted websites from potential security risks. Thank you for your attention and cooperation. Our support team is available to assist with any questions you may have.

Reported by Digital Pacific on their status page.

1. monitoringOct 22 · 13:46 UTC

   We’re pleased to share that PHP security patching has been completed across our shared Linux hosting environment to address the vulnerabilities CVE-2026-109618 and CVE-2026-109619. As an additional precaution, the temporary security mitigation limits applied earlier remain in place while we continue working to fully mitigate the risk. These limits may temporarily affect certain file uploads, large form submissions, and backup restores. Our teams are continuing to monitor the environment closely. We will provide further updates once the remaining restrictions can be safely removed. Thank you for your patience, understanding, and continued trust in us as we work to keep your hosting environment secure.

Reported by Digital Pacific on their status page.

1. UpdateOct 21 · 13:48 UTC

   We are continuing to work on a fix for this issue.

Reported by Digital Pacific on their status page.

1. resolvedOct 22 · 13:58 UTC

   This incident has been resolved.

Reported by Digital Pacific on their status page.

1. MonitoringOct 21 · 15:36 UTC

   The issue affecting email delivery and website availability has now been resolved. Our Engineering Team has confirmed that websites and email services are operating normally. We will continue to monitor the services to ensure stability. We appreciate your patience and understanding while we worked to address this issue.

Reported by Digital Pacific on their status page.

1. resolvedOct 13 · 03:58 UTC

   The email issue has been resolved. Email sending and receiving services are now operating normally. We apologize for the inconvenience and appreciate your patience.

Reported by Digital Pacific on their status page.

1. ResolvedOct 13 · 03:58 UTC

   The email issue has been resolved. Email sending and receiving services are now operating normally. We apologize for the inconvenience and appreciate your patience.

Reported by Digital Pacific on their status page.