Hostinger experienced a major incident on October 16, 2026 affecting Hostinger VPS API, lasting 1d 20h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- identified Oct 16, 2026, 11:20 AM UTC
We are aware of CVE-2026-99999, a critical Linux kernel vulnerability (CVSS 9.3) publicly disclosed on 15 October 2026. It affects the host systems underlying all Hostinger VPS plans. We have been tracking it since publication and are patching our entire server fleet as quickly as possible, with fixes deployed gradually as they become available. Emergency maintenance is in progress. Patching is being carried out in batches, and customer VPS will restart at least once. We will keep each interruption as brief as possible.
- investigating Oct 17, 2026, 04:22 PM UTC
We are performing an emergency maintenance on server LT-264, located in the Lithuania. Client websites hosted there could be temporarily inaccessible or might load slower than usual. Our team is currently working to restore normal performance levels. We apologize for any inconvenience caused.
- monitoring Oct 18, 2026, 02:31 AM UTC
The patch for CVE-2026-99999 has been applied to all VPS nodes and we are monitoring the results.
- resolved Oct 18, 2026, 07:44 AM UTC
This incident has been resolved. The security update has been applied to all VPS host nodes and services are operating normally. Your VPS was briefly restarted during the maintenance. If any application isn’t running, please start it again and make sure it’s set to start automatically on boot.