Resolved after 1 day 19 hours, affecting Website, on October 21, 2026.
The PHP patch has been applied to all affected cPanel servers and the temporary mitigations have been removed. Services are operating normally at the moment.
Affected components
Update timeline
- investigating Oct 21, 2026, 06:00 AM UTC
We are aware of reports regarding a recently disclosed PHP vulnerability affecting PHP installations globally. As a precautionary measure, OnlyDomains has implemented protective controls across relevant systems while our Infrastructure team continues to assess the situation and monitor vendor guidance. These measures may temporarily impact some functionality; however, they have been implemented to reduce potential security risk. At this time, there is no evidence of any impact to OnlyDomains systems or customer data. Further updates will be provided if there are any material developments.
- monitoring Oct 22, 2026, 01:35 AM UTC
Update: All cPanel hosting servers have now been patched against the recently disclosed PHP vulnerability. The temporary mitigation measures previously implemented remain in place while we validate the vendor fixes and restore affected functionality. We are actively working to remove these controls as quickly and safely as possible. Further updates will be provided as restoration activities progress.
- monitoring Oct 22, 2026, 07:16 AM UTC
The PHP patch has been applied to all affected cPanel servers and the temporary mitigations have been removed. Services are operating normally at the moment.
- resolved Oct 23, 2026, 01:48 AM UTC
This incident has been resolved.
Your product runs on more than OnlyDomains
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services