In response to several recent Linux vulnerabilities, we have strengthened the security of our network, virtualisation platform and hosting services. A summary of the measures taken:
- Network edge: We now drop IPv4 packets carrying IP options across our network, mitigating the critical Linux kernel TCP vulnerability CVE-2026-98432 for traffic reaching customer servers.
- Platform & hypervisor hardening: During our September–October 2026 maintenance cycle, the software on all cluster nodes was upgraded, and administrative and API access to our clusters and our sales/billing platform is now routed through an API gateway that inspects and validates every connection — strengthening isolation between tenants.
- cPanel / WHM hosting: Our cPanel & WHM platform was patched early against the critical PHP “PHP2Shell” vulnerabilities (CVE-2026-109618 / CVE-2026-109619), as soon as fixed releases were available. Customer hosting is protected.
- Kernel updates: We are applying Linux kernel updates across our managed systems as vendor fixes become available.
Where any further action is required on specific services, affected clients will be advised individually.
Friday, October 30, 2026
