Contabo incident
Important security update: patching of all VPS/VDS hosts (CVE-2026-99999)
Resolved after 7 days 1 hour, on October 15, 2026.
All patches are 100% done. We currently work hard on bringing back the last remaining down VPS host: 18343.
Update timeline
- investigating Oct 15, 2026, 05:33 PM UTC
We are aware of CVE-2026-99999, a critical Linux kernel vulnerability (CVSS 9.3) that was publicly disclosed on 15 October 2026. It affects the host systems underlying all VPS and VDS products. We have been tracking it since publication and are working to patch our entire server fleet as quickly as possible, with fixes deployed gradually as they become available. Customers should expect VPS or VDS to restart during this period. We will keep interruptions as brief as possible. We recommend keeping recent backups and making sure services start automatically after a reboot. Full details available on our helpdesk.
- monitoring Oct 19, 2026, 02:49 PM UTC
VPS host system updates are nearly complete, and VDS host systems will follow next. Following the updates, some host systems are currently unreachable. Our team is working to restore them as quickly as possible. The following host systems are known to be affected: 15404, 24812, 13888, 31940, 24580, 22541, 15915, 28472, 24601, 20800, 28261, 27593, 18343, 18194, 28372, 17176, 17575, 17289
- monitoring Oct 20, 2026, 07:28 AM UTC
Patches are at 99% done. The following host systems are currently known to be unreachable after the patches: 14950, 14930, 14964, 15915, 27593, 17289, 18194, 17575, 15404, 18343, 31940, 24812. Our team is working to restore them as quickly as possible.
- monitoring Oct 20, 2026, 03:08 PM UTC
The majority of system are up and running again, the following host systems are currently known to be unreachable after the patches: 13841
- monitoring Oct 22, 2026, 10:53 AM UTC
All patches are 100% done. We currently work hard on bringing back the last remaining down VPS host: 18343.
Your product runs on more than Contabo
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.