SiteHost Status

Oct `29`, `2026`

No incidents reported today.

Oct `28`, `2026`

Completed - The scheduled maintenance has been completed.
Oct 28, 07:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 27, 23:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities in the Linux Kernel, we need to perform emergency maintenance on our hardware nodes in order to apply security patches. During the maintenance, affected servers will be rebooted, so if you haven't already we would recommend you check that your server is safe to reboot.

This maintenance window includes servers on Private Clouds; all servers on a Private Cloud will be restarted during the maintenance period. If you have any questions or concerns about this maintenance, please reach out to us at support@sitehost.co.nz and we'll get back to you as soon as we can.
Oct 21, 16:48 NZDT

Oct `27`, `2026`

PHP CVE Security Updates & Patching

Resolved - We have completed today's work to update images on unmanaged Cloud Containers, completing our planned action.
Oct 27, 14:04 NZDT

Update - In rare circumstances, described below, PHP services can still be vulnerable even after recent patching. If the below conditions, which combine configuration and application code, apply then you ought to disable session upload progress as mitigation.

- The application sets `session.serialize_handler` to `php_binary` or `php_serialize` in its configuration, AND
- The application then switches `session.serialize_handler` to `php` at runtime with `ini_set()` before `calling session_start()`.

In this situation, please set `session.upload_progress.enabled = 0`.

Applications that never change the serialize handler at runtime are not affected.

Since this setup is unlikely in practice, it will be addressed through regular releases.
Oct 27, 10:57 NZDT

Update - We are in the process of patching all unmanaged Cloud Containers that are still running unpatched versions of PHP. There's still time to run your own updates, which we recommend since we do not monitor unmanaged Cloud Containers. Please also test your websites after PHP has been updated.
Oct 27, 10:27 NZDT

Monitoring - At this time we’ve patched all managed servers, updated Cloud Container images and made updates (or mitigation advice) available for unmanaged servers. Despite these patches and mitigations the best advice is still to update to PHP 8.2 or higher, everywhere you can. This helps ensure you get security fixes quickly, the updates are smaller and you aren’t relying on back-ported fixes.

We’ll continue to monitor the situation closely and provide further patches or updates as needed.
Oct 22, 22:33 NZDT

Update - Further Cloud Container images running older versions of PHP now have back-ported patches in place.

These updates have already been applied to managed Cloud Containers. For unmanaged containers, now is the time to log into the SiteHost Control Panel and update to the latest version of the image.

Our strongest advice remains to update to PHP 8.2+ as soon as possible.

These updates are, by necessity, more comprehensive than updates to images running PHP 8.2+. That means there’s a higher risk that they could affect website functionality. Please check that your sites are working as they should.

This round of updates included the the below images:

- Nginx: PHP 5.6, 7.0, 7.1, 7.2, 7.3
- Apache: PHP 5.6, 7.0, 7.1, 7.2, 7.3
- WordPress: PHP 7.1, 7.3, 7.4, 8.0
Oct 22, 22:12 NZDT

Update - Cloud Container web images with some older versions of PHP now have backported patches in place. These images are already applied to managed Cloud Containers. For unmanaged Cloud Containers, now is the time to log into the Control Panel and update to the latest version of the image.

Our strongest advice remains to update to PHP 8.2+ as soon as possible.

These backported image updates are, by necessity, more comprehensive than updates to images running PHP 8.2+. Consequently there’s a higher risk that they could affect website functionality. Please check that your sites are working as they should.

Cloud Container web images with backported PHP patches are:

- Nginx: PHP 8.1, 8.0, 7.4
- Apache: PHP 8.1, 8.0, 7.4
Oct 22, 16:47 NZDT

Update - We have applied the recommended mitigations to all Cloud Containers running PHP 5.2-5.5, except for custom images. These mitigations are not a complete solution, and they can affect website functionality. Please test your websites, especially those with file upload functions. We still strongly advise updating to PHP 8.2 or higher as soon as possible.
Oct 22, 14:50 NZDT

Update - Cloud Container images with patched versions of PHP are:

- Nginx: PHP 8.5, 8.4, 8.3, 8.2
- Apache: PHP 8.5, 8.4, 8.3, 8.2
- WordPress: PHP 8.5, 8.4, 8.2
- Silverstripe: PHP 8.3

For images running PHP 8.1 or earlier, we are investigating backporting patches. Those images are:

- Nginx: 8.1, 8.0, 7.4, 7.3, 7.2, 7.1, 7.0, 5.6
- Apache: 8.1, 8.0, 7.4, 7.3, 7.2, 7.1, 7.0, 5.6
- WordPress: 8.1, 8.0, 7.4, 7.3, 7.2, 7.1

If you are running one of these older versions, our best advice remains to update to PHP 8.2 or higher as soon as you can.
Oct 22, 13:50 NZDT

Update - For managed servers running Plesk, we have:
- Updated all versions of PHP from 8.2 up.
- Applied the recommended mitigations to earlier versions of PHP. These are not a full solution and can affect website functionality like file uploads, so if you are running PHP 8.1 or older, we recommend updating to a newer version as soon as possible.
Oct 22, 12:28 NZDT

Update - We have finished updating all managed Cloud Containers running images with PHP 8.2 or later. Patches were applied directly to the server, and correct image versions will now be shown in the Control Panel.

Please log into the Control Panel and check that your images are up to date. If you still see an 'NV' (new version) tag, either click it to start your own update or contact support@sitehost.nz.

If you are running custom images, you will need to update these. For images based on one of our PHP images (eg. Apache, Nginx, WordPress), update the base version of the image, rebuild, and update it as soon as possible.
Oct 22, 11:55 NZDT

Update - We have finished patching all installed PHP versions on all managed servers running cPanel.
Oct 22, 11:37 NZDT

Update - Updated Cloud Container images are now available for:
- Nginx (PHP 8.5, 8.4, 8.3, 8.2)
- Apache (PHP 8.5, 8.4, 8.3, 8.2)
- WordPress (PHP 8.5, 8.4, 8.3, 8.2)
- Silverstripe (PHP 8.3)

We are handling updates for managed Cloud Containers and will post an update once this work is finished. Because we are applying patches directly to the server, there will be a lag between the update happening and that change being reflected in the Control Panel.

For unmanaged Cloud Containers, we recommend that you update images as soon as possible.
Oct 22, 11:11 NZDT

Update - We recommend that customers running older PHP versions (PHP 8.1 or older) upgrade to a currently supported version as soon as possible. Older PHP versions that have reached end of life no longer receive security updates from the PHP project, potentially leaving websites exposed to known vulnerabilities.

We will be rolling out automatic image updates to Managed Cloud Container customers only. Customers using un-managed Cloud Containers can log in to the SiteHost control panel and manually update their container to the latest available image.
Oct 22, 08:38 NZDT

Identified - We have updated the Cloud Container images for PHP 8.2, PHP 8.3, PHP 8.4 and PHP 8.5 to address the security vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619.

We are now rolling out these updated images across our Cloud Container servers. Automatic updates may take some time to reach all customers.

If you would like to apply the update sooner, you can manually update your Cloud Container to the latest image version through the SiteHost control panel.

We will provide further updates as the rollout progresses.
Oct 22, 07:24 NZDT

Patching NodeJS against Node2Shell (CVE-2026-111497)

Resolved - Patching is complete and this incident has been resolved.
Oct 27, 13:57 NZDT

Update - We are upgrading NodeJS images for managed and unmanaged Cloud Containers running version 22, 24, or 26. Other versions are out of support and will not be patched.

If you have any custom images that are based on one of our NodeJS images, we recommend that you update the base image, rebuild, then test and update the custom image as soon as you can.
Oct 27, 12:39 NZDT

Update - We are continuing to work on a fix for this issue.
Oct 27, 12:34 NZDT

Update - We are continuing to work on a fix for this issue.
Oct 27, 10:28 NZDT

Identified - Node2Shell (CVE-2026-111497) is a high-severity vulnerability. Current versions affected are 22.x, 24.x, and 26.x. Patched Cloud Container images are available and we recommend upgrading as soon as possible. Otherwise we will roll upgrades for all affected Cloud Containers (managed or unmanaged) today. This will happen alongside the latest round of PHP patching.

Following this work we will move on to patching managed servers (virtual and dedicated). If you run unmanaged servers, please run your own updates as soon as you can.
Oct 27, 10:21 NZDT

Oct `26`, `2026`

No incidents reported.

Oct `25`, `2026`

Emergency Server Maintenance

Completed - The scheduled maintenance has been completed.
Oct 25, 07:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 24, 23:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities, we need to perform emergency maintenance on our hardware nodes in order to apply security patches. During the maintenance, affected servers will be rebooted, so if you haven't already we would recommend you check that your server is safe to reboot.

If you are on a managed server or our Cloud Container platform, this has already been done for you. Also, if you are on a managed or Cloud Container platform, we will be applying these security patches to your server as well.
Oct 20, 13:52 NZDT

Oct `24`, `2026`

Hazard Notification: AKL03 Power Failover Testing

Completed - The scheduled maintenance has been completed.
Oct 24, 13:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 24, 09:00 NZDT

Scheduled - Our upstream provider will be performing a test of their power failover procedures to ensure they complete successfully and without incident. While they will be cutting over to backup power for this test, we do not expect any customer impact.
Oct 16, 12:41 NZDT

Emergency Server Maintenance

Completed - The scheduled maintenance has been completed.
Oct 24, 07:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 23, 23:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities, we need to perform emergency maintenance on our hardware nodes in order to apply security patches. During the maintenance, affected servers will be rebooted, so if you haven't already we would recommend you check that your server is safe to reboot.

If you are on a managed server or our Cloud Container platform, this has already been done for you. Also, if you are on a managed or Cloud Container platform, we will be applying these security patches to your server as well.
Oct 20, 13:49 NZDT

Hazard Notification: Emergency Server Maintenance - CAL01

Completed - The scheduled maintenance has been completed.
Oct 24, 03:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 23, 19:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities in the Linux Kernel, we need to perform emergency maintenance on our hardware nodes in order to apply security patches.

Guests will be live migrated, which means we expect there will be no interruption or downtime. However, it is possible that guests will experience raised I/O for the duration of their migration.
Oct 21, 16:47 NZDT

Oct `23`, `2026`

Hazard Notification: Emergency Server Maintenance - FRA01

Completed - The scheduled maintenance has been completed.
Oct 23, 19:01 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 23, 11:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities in the Linux Kernel, we need to perform emergency maintenance on our hardware nodes in order to apply security patches.

Guests will be live migrated, which means we expect there will be no interruption or downtime. However, it is possible that guests will experience raised I/O for the duration of their migration.
Oct 21, 16:47 NZDT

Emergency Server Maintenance

Completed - The scheduled maintenance has been completed.
Oct 23, 07:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 22, 23:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities, we need to perform emergency maintenance on our hardware nodes in order to apply security patches. During the maintenance, affected servers will be rebooted, so if you haven't already we would recommend you check that your server is safe to reboot.

If you are on a managed server or our Cloud Container platform, this has already been done for you. Also, if you are on a managed or Cloud Container platform, we will be applying these security patches to your server as well.
Oct 20, 13:47 NZDT

Oct `22`, `2026`

Emergency Server Maintenance

Completed - The scheduled maintenance has been completed.
Oct 22, 07:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 21, 23:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities, we need to perform emergency maintenance on our hardware nodes in order to apply security patches. During the maintenance, affected servers will be rebooted, so if you haven't already we would recommend you check that your server is safe to reboot.

If you are on a managed server or our Cloud Container platform, this has already been done for you. Also, if you are on a managed or Cloud Container platform, we will be applying these security patches to your server as well.
Oct 19, 15:07 NZDT

Oct `21`, `2026`

Emergency Server Maintenance

Completed - The scheduled maintenance has been completed.
Oct 21, 07:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 20, 23:00 NZDT

Update - Some status page subscribers received a notification with the incorrect time; the maintenance window for our AKL03/SYD01 servers is due to begin at 11PM NZ time on Tuesday August 20th. We've corrected the status page and are sorry for any confusion.
Oct 19, 15:05 NZDT

Update - We will be undergoing scheduled maintenance during this time.
Oct 19, 14:58 NZDT

Scheduled - Due to some recently uncovered vulnerabilities, we need to perform emergency maintenance on our hardware nodes in order to apply security patches. During the maintenance, affected servers will be rebooted, so if you haven't already we would recommend you check that your server is safe to reboot.

If you are on a managed server or our Cloud Container platform, this has already been done for you. Also, if you are on a managed or Cloud Container platform, we will be applying these security patches to your server as well.
Oct 19, 14:53 NZDT

Oct `20`, `2026`

Node outage - NZ-AKL2-VP731L

Resolved - This incident has been resolved.
Oct 20, 15:39 NZDT

Monitoring - A fix has been implemented and we are monitoring the results.
Oct 20, 15:30 NZDT

Investigating - The team are currently investigating a hardware issue on an internal hardware node which is impacting the SiteHost website, our Knowledge Base and some supplemental services such as paste.sitehost.nz. If you need to access the SiteHost control panel you should still be able to access it via cp.sitehost.nz
Oct 20, 14:07 NZDT

Emergency Server Maintenance

Completed - The scheduled maintenance has been completed.
Oct 20, 05:00 NZDT

In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 19, 23:00 NZDT

Scheduled - Due to some recently uncovered vulnerabilities, we need to perform emergency maintenance on our hardware nodes in order to apply security patches.

During this window, services such as the API and Control Panel will experience a brief downtime.
Oct 19, 14:40 NZDT

Oct `19`, `2026`

Scheduled Server Maintenance

Completed - Due to important security updates requiring emergency maintenance, we are bundling the changes originally planned for this maintenance window alongside the security updates. Please refer to the Emergency Server Maintenances scheduled on our Status Page for information on when your server will be rebooted.

If you're not sure how your server is impacted, please reach out to support@sitehost.co.nz
Oct 19, 15:19 NZDT

Scheduled - We are performing maintenance on our nodes to provide improved security, performance, and reliability. During the maintenance, affected servers will be rebooted, so if you haven't already, we would recommend you check that your server is safe to reboot. If you are on a managed server or our Cloud Container platform, this has already been done for you.

Each affected node should expect approximately 5 minutes of downtime while the maintenance is carried out.

If you are affected by this maintenance, you should have already received an email from us.
Oct 16, 04:30 NZDT

Oct `18`, `2026`

No incidents reported.

Oct `17`, `2026`

No incidents reported.

Oct `16`, `2026`

No incidents reported.

Oct `15`, `2026`

No incidents reported.

All Systems Operational

Scheduled Maintenance

Hazard Notification: Scheduled Server Maintenance Oct 29, 2026 23:00 - Oct 30, 2026 07:00 NZDT

Past Incidents

Oct 29, 2026

Oct 28, 2026

Oct 27, 2026

Oct 26, 2026

Oct 25, 2026

Oct 24, 2026

Oct 23, 2026

Oct 22, 2026

Oct 21, 2026

Oct 20, 2026

Oct 19, 2026

Oct 18, 2026

Oct 17, 2026

Oct 16, 2026

Oct 15, 2026

Hazard Notification: Scheduled Server Maintenance Oct `29`, `2026` `23:00` - Oct `30`, `2026` `07:00` NZDT

Oct `29`, `2026`

Oct `28`, `2026`

Oct `27`, `2026`

Oct `26`, `2026`

Oct `25`, `2026`

Oct `24`, `2026`

Oct `23`, `2026`

Oct `22`, `2026`

Oct `21`, `2026`

Oct `20`, `2026`

Oct `19`, `2026`

Oct `18`, `2026`

Oct `17`, `2026`

Oct `16`, `2026`

Oct `15`, `2026`