🔔 Temporary suspension of VM panel (vmm)

A vulnerability has been discovered in the VMmanager control panel. At the same time, no signs of its exploitation in our infrastructure have been detected.

🛡 For security reasons, we have temporarily suspended VMmanager until the corresponding fix (patch) is released.

Thank you for your understanding!

✅ VMmanager operation restored

A fix for the previously identified VMmanager vulnerability has been released. The necessary security measures have been taken, and the control panel’s operation has been fully restored.

🛡 We remind you that no signs of exploitation of the vulnerability in our infrastructure have been detected.

Thank you for your patience and understanding!

🔔 Temporary suspension of VM panel (again)

A vulnerability has been discovered in the VMmanager control panel. At the same time, no signs of its exploitation in our infrastructure have been detected.

🛡 For security reasons, we have temporarily suspended VMmanager until the corresponding fix (patch) is released.

Thank you for your understanding!

🚨 Critical PHP Security Alert: Two Vulnerabilities Discovered

The PHP development team has announced an upcoming security release addressing two critical vulnerabilities, each rated 9.2/10 on the CVSS 4.0 scale.

The security updates are scheduled for October 21, 2026, at 14:00 UTC.

🔐 What should VPS owners do?

If you're running PHP-based websites or applications on your VPS, we recommend taking the following steps:

🔹 Check your current PHP version.

🔹 Make sure you have recent backups of your websites and databases.

🔹 Install the security updates as soon as they become available.

🔹 Verify that your applications work correctly after updating.

Temporary mitigation measures

Until the official security patches are installed, server administrators may consider disabling PHP's upload progress tracking feature by setting the following option in php.ini:

session.upload_progress.enabled = Off

Additionally, unnecessary multipart/form-data requests can be restricted using a Web Application Firewall (WAF) or reverse proxy, provided legitimate file uploads are not disrupted.

⚠️ Important: These measures are based on third-party technical analysis and may address only certain potential attack scenarios. They do not guarantee complete protection or replace official PHP security updates.

Details about affected PHP versions will be published alongside the security release.

🔗 Official announcement: https://www.php.net/archive/2026.php#2026-10-20-1

🔗 Technical analysis: https://jackalsyn.com/posts/php-up-2026.html#mitigation

⚠️ VMmanager 6: Control Panel Access Remains Unavailable

Access to the VMmanager 6 virtualization control panel remains temporarily restricted due to unresolved security vulnerabilities.

The software vendor has already released interim security patches, but the vulnerabilities have not yet been fully addressed. For security reasons, access to the control panel will remain disabled until it is considered safe to restore.

What does this mean for our customers?

🔹 The VMmanager 6 control panel is still unavailable.

🔹 If you need assistance with VPS management, please contact our technical support team.

🔹 Our administrators can assist with available server management operations while access is restricted.

🔹 There is currently no confirmed timeline for restoring access.

We are closely following the vendor's progress and will provide updates as new information becomes available.

Thank you for your patience and understanding.

VPS1 Team

🔔 VMmanager 6: Access Restoration Coming Soon

Good news! We are preparing to restore customer access to the VMmanager 6 control panel.

As a reminder, access was temporarily restricted due to identified security vulnerabilities.

While the panel remains unavailable, our technical support team is here to assist you with VPS management.

We don't have a confirmed restoration date yet, but we'll announce it as soon as access is available again.

VPS1 Team