This incident has been resolved. The security update has been applied to all VPS host nodes and services are operating normally. Your VPS was briefly restarted during the maintenance. If any application isn’t running, please start it again and make sure it’s set to start automatically on boot.
Posted Oct 18, 2026 - 07:44 UTC
Monitoring
The patch for CVE-2026-99999 has been applied to all VPS nodes and we are monitoring the results.
Posted Oct 18, 2026 - 02:31 UTC
Investigating
We are continuing to patch our server fleet against CVE-2026-99999. The rollout is proceeding in batches, and customer VPS are restarted as each batch is completed. We are keeping each interruption as brief as possible and will share a further update once patching is complete. We apologize for any inconvenience caused.
Posted Oct 17, 2026 - 16:22 UTC
Identified
We are aware of CVE-2026-99999, a critical Linux kernel vulnerability (CVSS 9.3) publicly disclosed on 15 October 2026. It affects the host systems underlying all Hostinger VPS plans.
We have been tracking it since publication and are patching our entire server fleet as quickly as possible, with fixes deployed gradually as they become available.
Emergency maintenance is in progress. Patching is being carried out in batches, and customer VPS will restart at least once. We will keep each interruption as brief as possible.
Posted Oct 16, 2026 - 11:20 UTC
This incident affected: Core Services (Hostinger VPS API).