Scheduled Nginx Security Upgrade Across Cloudways Fleet
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 02, 2026 - 08:15 UTC
Scheduled - As part of our ongoing commitment to security, we are rolling out an Nginx upgrade across our fleet to address the October 2026 Nginx security advisories. All the vulnerabilities are resolved in the version we are upgrading to.
As part of this upgrade, Nginx will be restarted on affected servers. The restart is near-instant and may cause a brief interruption of a few milliseconds, after which your applications and websites will continue to operate normally. No lasting disruption is expected.
No action is required on your part. We will post another update once the upgrade has been completed across the fleet.
Nov 2, 2026 08:15-15:15 UTC
Cloudways Home Operational
Cloudways Cloud Platform Console Operational
Cloudways Cloud Platform Service Operational
Cloudways Support Operational
Cloudways API Operational
Cloud Providers Operational
AWS Operational
DigitalOcean Operational
Google Cloud Operational
Linode Operational
Vultr Operational
Add-on Services Operational
Cloudflare Enterprise Operational
DNS Made Easy Operational
Elastic Email Operational
Rackspace Email Operational
Stackpath Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Nov 2, 2026

Unresolved incident: Scheduled Nginx Security Upgrade Across Cloudways Fleet.

Nov 1, 2026

No incidents reported.

Oct 31, 2026

No incidents reported.

Oct 30, 2026

PHP Security Patch Update: Known Regressions
Resolved - This incident has been resolved.
Oct 30, 07:39 UTC
Update - PHP RCE Advisory (CVE-2026-115560)

Following the PHP Group’s latest security advisory (https://www.php.net/archive/2026.php#2026-10-23-1), the configuration-dependent remote code execution (RCE) issue highlighted in our previous update has now been assigned CVE-2026-115560.

As reflected in our previous update, our Security team had proactively anticipated this vulnerability and implemented mitigations before the vulnerability was formally disclosed. The mitigations already in place align with the recommendations in the PHP Group’s latest advisory. Customers continue to be protected against the new CVE-2026-115560. No action is required from customers at this time.

We continue to monitor developments and will adapt our protections as needed.
Oct 23, 14:06 UTC
Monitoring - We are aware of the reports highlighting regressions in a few of the recent official PHP security patches. The official PHP Group has not yet published an official position or updated patches addressing these reports. Mitigations remain in place to protect customers against the currently known attack paths, and we continue to monitor for further developments. No action is required from customers at this time.

The currently known regressions are:

1. Configuration-dependent RCE: A reported RCE demonstration affects PHP 8.5.12 (which may possibly affect earlier versions as well) under specific configurations. We have implemented mitigations that break the demonstrated exploit chain. Our customers remain protected against this specific attack path.

2. Memory-safety Regression: A separate, verified bug report identifies a potential double-free issue affecting PHP 8.4.27 and 8.5.12, which may cause crashes under specific conditions. This is currently a stability and memory-safety concern, not a critical security issue (e.g., remote code execution).

We are monitoring the situation and will continue to respond quickly to new vulnerability details or attack techniques as they emerge. If you have any questions, please reach out to our support team.
Oct 23, 09:44 UTC

Oct 29, 2026

No incidents reported.

Oct 28, 2026

No incidents reported.

Oct 27, 2026

No incidents reported.

Oct 26, 2026

No incidents reported.

Oct 25, 2026

No incidents reported.

Oct 24, 2026

No incidents reported.

Oct 23, 2026

Critical PHP Remote Code Execution Vulnerabilities - Monitoring & Mitigations Underway
Resolved - This incident has been resolved.
Oct 23, 12:38 UTC
Update - We are continuing to monitor for any further issues.
Oct 22, 10:22 UTC
Update - The PHP security patch rollout is complete, and all active servers have been successfully updated. Our support team is proactively reaching out to a small subset of customers whose environments require additional assistance.

If you have any questions, please reach out to our support team.
Oct 22, 10:20 UTC
Update - The PHP security patch rollout is complete, and all active servers have been successfully updated. Our support team is proactively reaching out to a small subset of customers whose environments require additional assistance.

If you have any questions. please reach out to our support team.
Oct 22, 10:11 UTC
Update - The PHP security patch rollout is in its final stage, with the majority of servers now patched. Our team is completing the remaining instances and we expect all patching to be completed by 09:00 UTC.

Interim protections remain in place until then and no action is needed from the customers.
Oct 22, 07:03 UTC
Update - The PHP security patch is being deployed to customer applications hosted on Flexible. Rollout is in progress and proceeding on schedule across all remaining instances. No action is needed from the customers. We will share a final update once the activity is completed.

Our interim protections remains in place for all sites until the deployment is complete.
Oct 22, 04:07 UTC
Monitoring - We have applied security patches for all customer applications hosted on Autonomous. In parallel, we continue to rollout patches for applications hosted on Flexible.
Oct 22, 01:02 UTC
Update - To follow up on our previous notice, interim configuration-level mitigations recommended by the official PHP Group have been deployed across the fleet. The phased rollout of official security patches is currently in progress, with these interim measures providing an additional layer of protection while patch deployment continues toward completion across the entire fleet.

We are applying security patches across all Cloudways-supported PHP versions, including deprecated versions, covering PHP 5.6 and above. The rollout is currently in progress and includes PHP 5.6, 7.4, 8.0, 8.1, 8.2, 8.3, and 8.4, using the corresponding security patches for each version.

This maintenance activity does not impact the availability or operation of Cloudways Platform, customer websites, or Affiliate Portal services.
Oct 21, 22:19 UTC
Update - Today, the PHP Group disclosed critical Remote Code Execution (RCE) vulnerabilities affecting PHP. Because PHP powers a significant share of the web, including WordPress, Drupal, Laravel, and custom applications, we notified all customers this morning.

To follow up on our previous notice on status.cloudways.com, we are implementing further latest interim configuration-level mitigations recommended by the PHP Group while preparing for a phased rollout of the official patches across our fleet. These interim measures provide an additional layer of protection while patch deployment is underway.

For deprecated PHP versions, we are working with our ELTS partners to apply the appropriate security patches and maintain security coverage.
Oct 21, 16:43 UTC
Identified - Cloudways Security is closely monitoring the situation and implementing interim mitigations (that may cause a short service disruption) to strengthen the security of affected PHP environments while awaiting the release of official patches from the PHP Group. The PHP Group has announced that patch releases are expected to begin on 21 October 2026 at 14:00 UTC, with availability varying by PHP version.

For deprecated PHP versions, Cloudways is leveraging its Extended Long Term Support (ELTS) partnerships to help maintain security coverage and address vulnerabilities where official patches may not be available.

Customers will receive further updates via email, and this status page will be updated as new information becomes available.
Oct 21, 09:16 UTC

Oct 22, 2026

Oct 21, 2026

Cloudways Website & Affiliate portal unavailable
Resolved - The maintenance on the Cloudways website and affiliate portal is complete, and both services are fully restored and operating normally.

Please reach out to support in case of any questions or issues.
Oct 21, 19:48 UTC
Identified - Affected service: Cloudways Website and Affiliate Portal

Update: Our team is still actively working on applying the PHP security patches, and the Cloudways website and affiliate portal is currently unavailable as a result. The work is taking slightly longer than initially expected, and we now anticipate the website and affiliate portal being back online within approximately the next hour. We appreciate your patience and will post another update as soon as the stated components are fully restored.
Oct 21, 16:26 UTC
Critical Maintenance
Completed - The scheduled maintenance has been completed.
Oct 21, 16:05 UTC
In progress - Scheduled maintenance is currently in progress may take some additional time. We will provide updates as necessary.
Oct 21, 13:35 UTC
Scheduled - Affected services: Cloudways Platform, Affiliate Portal, and Website

Scheduled window: 21 October 2026, 13:35 UTC – 15:05 UTC

What’s Happening
As part of a critical maintenance activity, we will be applying patches to affected services. To ensure these updates are deployed safely, emergency maintenance will be performed on the Cloudways Platform, Affiliate Portal, and Website.

What to Expect
During the maintenance window, these services will be temporarily unavailable, and you will not be able to access the Platform, Affiliate Portal, or Website.

Expected downtime: 13:35 UTC – 15:05 UTC (approximately 90 minutes)

Please note that this is the expected duration. The window may be extended if additional time is required to complete the patching safely. Should that happen, we will update this page accordingly.

Important
This maintenance affects platform access only. We will post updates here as the work progresses and confirm once all services are fully restored. We appreciate your patience and understanding as we work to keep your environments secure.
Oct 21, 13:33 UTC
Autonomous: Partial Service Degradation – London Region
Resolved - We apologize for the inconvenience. The issue has been resolved. If you continue to experience any related issues, please contact our support team
Oct 21, 07:15 UTC
Identified - The issue has been identified as originating from our upstream provider in the London region. We are in close coordination with their team as they work on a resolution. We will provide further updates here as more information becomes available. We apologize for any inconvenience caused.
Oct 20, 10:05 UTC
Investigating - Some Cloudways Autonomous applications hosted in the London region may be experiencing temporary connectivity issues due to a partial disruption. Our team is actively working with the infrastructure provider to restore full stability as quickly as possible.
Oct 20, 07:29 UTC

Oct 20, 2026

Oct 19, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage