We have applied a temporary security mitigation to our hosting fleet and Managed VPS systems without requiring immediate reboots.

We are awaiting a kernel security update for a permanent fix. Most systems are expected to support live patching once the update is available; a small number will require a reboot after the updated kernel is installed.

We are currently experiencing higher than usual support volumes due to the critical PHP (CVE-2026-109618 / CVE-2026-109619) and NodeJS vulnerabilities (CVE-2026-105483, CVE-2026-106069, CVE-2026-111497). Please see our other status updates for further details on those.

We appreciate your patience and hope to get back to our usual prompt response times as soon as possible.

As part of our ongoing mitigations against the recent critical PHP security releases, PHPMyAdmin for Managed WordPress (Onyx) has been temporarily taken offline to ensure its ongoing stability and the security of customer databases.

The instance itself has been patched against the security issues. Our team are using this time to ensure that it is configured optimally.

We do not currently have an ETA on when PHPMyAdmin will become available again, but we shall keep this updated as progress happens. As a rough idea of the timeline, it is likely that PHPMyAdmin for Managed WordPress (Onyx) will not be available until the first half of next week.

Thank you for your understanding.