Plesk Panel temporarily unavailable

To protect your websites from a newly published critical PHP security vulnerability, we have temporarily closed access to the Plesk control panel. Your websites, email, webmail and FTP keep working normally.

We will reopen the control panel as soon as Plesk releases its security update. If you need anything changed in the meantime (DNS, email accounts, SSL certificates, files), open a support ticket and we’ll take care of it for you.

Thank you for your patience.
In progress
To protect your websites from a newly published critical PHP security vulnerability, we have temporarily closed access to the Plesk control panel. Your websites, email, webmail and FTP keep working normally.

We will reopen the control panel as soon as Plesk releases its security update. If you need anything changed in the meantime (DNS, email accounts, SSL certificates, files), open a support ticket and we’ll take care of it for you.

Thank you for your patience.
Security Updates and Reboots for KVM Host Nodes on 17 Oct 2026 22:57:27 (UTC+00:00)
Resolved
We applied security updates to affected KVM host nodes in response to CVE-2026-99999, a critical Linux kernel vulnerability that may allow a malicious virtual machine to affect its host.

We initially waited for a KernelCare live patch to avoid interrupting customer virtual machines. As a suitable patch did not become available within an acceptable timeframe, we proceeded with kernel updates and reboots. Host nodes were patched and rebooted sequentially to limit the impact.

Customers may have experienced a service interruption of up to approximately 30 minutes while the node hosting their server was updated and restarted.

Customers running their own virtualization stack on dedicated servers, including KVM/QEMU, should assess whether their systems are affected and apply any required updates and reboots themselves. Dedicated servers were not part of this maintenance unless they were operated as part of our managed virtualization infrastructure.

We apologize for the short notice and any inconvenience. Given the potential guest-to-host impact, we could not delay patching further.