Hosting | VMmanager and DCImanager control panels

Update timeline

1. identified Oct 18, 2026, 12:00 PM UTC

   The VMmanager and DCImanager control panels in Hosting in all locations have been temporarily disabled following the discovery of a security vulnerability in third-party software provided by our vendor. **Impact:** It is currently not possible to create, stop, pause, or manage virtual or dedicated servers via the control panels. All existing servers continue to run normally. **What we have done:** The affected systems have been isolated and additional protective measures applied to prevent further unauthorized access. We are working with the vendor to verify whether any customer services or data were affected. We will provide an update as soon as we have more information. We apologize for the inconvenience.

2. identified Oct 20, 2026, 02:09 PM UTC

   $35

3. identified Oct 20, 2026, 02:10 PM UTC

   $43

4. identified Oct 23, 2026, 10:04 AM UTC

   We continue working on restoring our services and addressing the impact of the security incident. **At this stage, we have no evidence that customer data has ever been transferred outside Gcore's infrastructure. In parallel with recovery efforts, we are implementing additional security measures to prevent similar incidents in the future.** Services and dedicated server sales will be restored gradually across locations. We expect to reopen dedicated server sales in the first locations today, October 23, with additional locations becoming available progressively over the next week. We will continue to provide updates as recovery progresses. Thank you for your patience and understanding.

5. monitoring Oct 24, 2026, 07:24 PM UTC

   We implemented a fix and are currently monitoring the result.

6. monitoring Oct 24, 2026, 07:26 PM UTC

   We continue working on restoring full functionality of our management panels and addressing the impact of the security incident. At this stage, we still have no evidence that Gcore customer data has been transferred outside our infrastructure, which we consider an encouraging sign. Server management and new orders are now available again in the following locations: \- Singapore \- São Paulo \- Tel Aviv \- Ashburn Recovery efforts are ongoing for the remaining locations, which will become available gradually. If you have questions or urgent needs regarding specific locations, please contact our Support team. Your feedback will help us prioritize recovery efforts based on customer needs. We will continue sharing updates as we make progress. Thank you for your patience and understanding.

7. identified Oct 24, 2026, 11:07 PM UTC

   We continue working on restoring full functionality of our management panels and addressing the impact of the security incident. At this stage, we still have no evidence that Gcore customer data has been transferred outside our infrastructure, which we consider an encouraging sign. Server management and new orders are now available again in the following locations: VPS: São Paulo, Brazil USA, Ashburn DS: São Paulo, Brazil Israel, Tel Aviv Singapore South Africa, Johannesburg France, Paris Recovery efforts are ongoing for the remaining locations, which will become available gradually. If you have questions or urgent needs regarding specific locations, please contact our Support team. Your feedback will help us prioritize recovery efforts based on customer needs. We will continue sharing updates as we make progress. Thank you for your patience and understanding.