Critical PHP Remote Code Execution Vulnerabilities - Monitoring & Mitigations Underway
Update - The PHP security patch rollout is in its final stage, with the majority of servers now patched. Our team is completing the remaining instances and we expect all patching to be completed by 09:00 UTC.

Interim protections remain in place until then and no action is needed from the customers.
Oct 22, 2026 - 07:03 UTC
Update - The PHP security patch is being deployed to customer applications hosted on Flexible. Rollout is in progress and proceeding on schedule across all remaining instances. No action is needed from the customers. We will share a final update once the activity is completed.

Our interim protections remains in place for all sites until the deployment is complete.
Oct 22, 2026 - 04:07 UTC
Monitoring - We have applied security patches for all customer applications hosted on Autonomous. In parallel, we continue to rollout patches for applications hosted on Flexible.
Oct 22, 2026 - 01:02 UTC
Update - To follow up on our previous notice, interim configuration-level mitigations recommended by the official PHP Group have been deployed across the fleet. The phased rollout of official security patches is currently in progress, with these interim measures providing an additional layer of protection while patch deployment continues toward completion across the entire fleet.

We are applying security patches across all Cloudways-supported PHP versions, including deprecated versions, covering PHP 5.6 and above. The rollout is currently in progress and includes PHP 5.6, 7.4, 8.0, 8.1, 8.2, 8.3, and 8.4, using the corresponding security patches for each version.

This maintenance activity does not impact the availability or operation of Cloudways Platform, customer websites, or Affiliate Portal services.
Oct 21, 2026 - 22:19 UTC
Update - Today, the PHP Group disclosed critical Remote Code Execution (RCE) vulnerabilities affecting PHP. Because PHP powers a significant share of the web, including WordPress, Drupal, Laravel, and custom applications, we notified all customers this morning.

To follow up on our previous notice on status.cloudways.com, we are implementing further latest interim configuration-level mitigations recommended by the PHP Group while preparing for a phased rollout of the official patches across our fleet. These interim measures provide an additional layer of protection while patch deployment is underway.

For deprecated PHP versions, we are working with our ELTS partners to apply the appropriate security patches and maintain security coverage.
Oct 21, 2026 - 16:43 UTC
Identified - Cloudways Security is closely monitoring the situation and implementing interim mitigations (that may cause a short service disruption) to strengthen the security of affected PHP environments while awaiting the release of official patches from the PHP Group. The PHP Group has announced that patch releases are expected to begin on 21 October 2026 at 14:00 UTC, with availability varying by PHP version.

For deprecated PHP versions, Cloudways is leveraging its Extended Long Term Support (ELTS) partnerships to help maintain security coverage and address vulnerabilities where official patches may not be available.

Customers will receive further updates via email, and this status page will be updated as new information becomes available.
Oct 21, 2026 - 09:16 UTC
Cloudways Home Operational
Cloudways Cloud Platform Console Operational
Cloudways Cloud Platform Service Operational
Cloudways Support Operational
Cloudways API Operational
Cloud Providers Operational
AWS Operational
DigitalOcean Operational
Google Cloud Operational
Linode Operational
Vultr Operational
Add-on Services Operational
Cloudflare Enterprise Operational
DNS Made Easy Operational
Elastic Email Operational
Rackspace Email Operational
Stackpath Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Oct 22, 2026

Unresolved incident: Critical PHP Remote Code Execution Vulnerabilities - Monitoring & Mitigations Underway.

Oct 21, 2026

Cloudways Website & Affiliate portal unavailable
Resolved - The maintenance on the Cloudways website and affiliate portal is complete, and both services are fully restored and operating normally.

Please reach out to support in case of any questions or issues.
Oct 21, 19:48 UTC
Identified - Affected service: Cloudways Website and Affiliate Portal

Update: Our team is still actively working on applying the PHP security patches, and the Cloudways website and affiliate portal is currently unavailable as a result. The work is taking slightly longer than initially expected, and we now anticipate the website and affiliate portal being back online within approximately the next hour. We appreciate your patience and will post another update as soon as the stated components are fully restored.
Oct 21, 16:26 UTC
Critical Maintenance
Completed - The scheduled maintenance has been completed.
Oct 21, 16:05 UTC
In progress - Scheduled maintenance is currently in progress may take some additional time. We will provide updates as necessary.
Oct 21, 13:35 UTC
Scheduled - Affected services: Cloudways Platform, Affiliate Portal, and Website

Scheduled window: 21 October 2026, 13:35 UTC – 15:05 UTC

What’s Happening
As part of a critical maintenance activity, we will be applying patches to affected services. To ensure these updates are deployed safely, emergency maintenance will be performed on the Cloudways Platform, Affiliate Portal, and Website.

What to Expect
During the maintenance window, these services will be temporarily unavailable, and you will not be able to access the Platform, Affiliate Portal, or Website.

Expected downtime: 13:35 UTC – 15:05 UTC (approximately 90 minutes)

Please note that this is the expected duration. The window may be extended if additional time is required to complete the patching safely. Should that happen, we will update this page accordingly.

Important
This maintenance affects platform access only. We will post updates here as the work progresses and confirm once all services are fully restored. We appreciate your patience and understanding as we work to keep your environments secure.
Oct 21, 13:33 UTC
Autonomous: Partial Service Degradation – London Region
Resolved - We apologize for the inconvenience. The issue has been resolved. If you continue to experience any related issues, please contact our support team
Oct 21, 07:15 UTC
Identified - The issue has been identified as originating from our upstream provider in the London region. We are in close coordination with their team as they work on a resolution. We will provide further updates here as more information becomes available. We apologize for any inconvenience caused.
Oct 20, 10:05 UTC
Investigating - Some Cloudways Autonomous applications hosted in the London region may be experiencing temporary connectivity issues due to a partial disruption. Our team is actively working with the infrastructure provider to restore full stability as quickly as possible.
Oct 20, 07:29 UTC

Oct 20, 2026

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

Degradation Impacting Vultr Server Operations
Resolved - We have confirmed that the upstream Vultr API performance degradation has been fully resolved. All server management operations including launching new instances, cloning existing servers, and executing reboots are now fully restored and functioning normally. Thank you for your patience while we monitored the resolution.
Oct 14, 11:53 UTC
Identified - We are currently investigating an issue impacting upstream API requests to Vultr. As a result, server management operations involving Vultr instances including launching new servers, cloning existing servers, and executing reboots may time out or fail. Active, running Vultr servers and hosted applications are unaffected and operating normally, as only administrative management actions are impacted. Our team is actively monitoring the upstream response, and we will provide another update as soon as more information becomes available.
Oct 1, 06:50 UTC

Oct 13, 2026

Rackspace Webmail Login & Mailbox Provisioning Issues
Resolved - We have confirmed that the upstream Rackspace email service issue has been fully resolved. All services, including webmail portal logins, third-party email clients, and mailbox creation, are now functioning normally. Thank you for your patience during this time.
Oct 13, 11:58 UTC
Investigating - We are currently aware of an issue affecting Rackspace email services. Users may experience difficulty logging into their email accounts via the webmail portal or third-party email clients, as well as errors when creating new mailboxes.

The Rackspace team has identified the root cause and is actively working on a resolution. We are closely monitoring the situation and will provide further updates as new information becomes available. We apologize for any inconvenience caused.
Oct 12, 05:00 UTC

Oct 12, 2026

Oct 11, 2026

No incidents reported.

Oct 10, 2026

No incidents reported.

Oct 9, 2026

No incidents reported.

Oct 8, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage