Critical PHP Security Update

Incident Report for Smartt

Monitoring

We applied updates to all remaining servers that have PHP installed. We patched all client-facing and public-facing servers and rolled back all temporary mitigations by 1337 PT.

We are monitoring and will continue to monitor our environment for any issues.
Posted Oct 21, 2026 - 15:39 PDT

Update

All cPanel servers have been updated and are no longer degraded.

Remaining mitigations are still underway.
Posted Oct 21, 2026 - 08:38 PDT

Update

Magicmail has been updated and is no longer in a degraded state.

Remaining updates are still underway.
Posted Oct 21, 2026 - 08:09 PDT

Identified

The developers of PHP released a critical update this morning, and to protect our clients, we are immediately applying patches and mitigations to all affected servers. Until the risk is mitigated, we have disabled access to some features of our shared services.

We will provide updates as the mitigation efforts continue.
Posted Oct 21, 2026 - 07:59 PDT
This incident affects: Shared Hosting (cPanel, Plesk, MagicMail).