All Plesk servers have been updated and Plesk should be available again for all customers. If you encounter any issues reaching the Plesk control panel, please let us know through our regular support channels and we will be happy to help.
For now we are still monitoring all our systems and continue to do so intensively for the next few hours.
Posted Oct 22, 2026 - 12:17 CEST
Update
All PHP versions up from PHP 7.4 and higher have been patched and secured. If you use PHP version 7.3 or lower, we encourage you to update as soon as possible.
Plesk has released new updates and we are currently rolling them out on the platform. We expect the Plesk portal to be accessible again in the next few hours.
Posted Oct 22, 2026 - 06:32 CEST
Update
No patch has been released for the Plesk UI, so the Plesk portal has temporarily been disabled. Websites, email and other services are not affected and will still be available. As soon as Plesk releases its patches, we will update our servers accordingly and resume its availability.
Posted Oct 21, 2026 - 21:44 CEST
Update
Patches for PHP 7.4, 8.0, and 8.1 are now available as well and are being deployed. We will provide a new update once deployment has fully completed.
Posted Oct 21, 2026 - 20:38 CEST
Update
Deployment of the PHP updates is well underway. Currently, only patches for PHP 8.2 and newer are being deployed. We are still awaiting the availability of patches for the unsupported 7.4, 8.0, and 8.1 versions. We will soon provide a new update on the progress of the deployment.
The PHP updates have been released, and we have started deploying them across all servers. We will provide a new update later today.
Posted Oct 21, 2026 - 16:30 CEST
Update
Deployment of the ModSecurity rules is now complete across all servers. We are awaiting the official PHP update release, expected this afternoon, and will provide a further update once it’s available and installation has begun.
Posted Oct 21, 2026 - 14:15 CEST
Monitoring
We are currently deploying new ModSecurity rules to all Shared, Managed WordPress, and Managed VPS servers to block exploitation attempts. Please note that these rules are a mitigation to reduce immediate risk, not a complete fix. We will deploy the new PHP versions, which address the underlying vulnerabilities, once they are made available later today.
Posted Oct 21, 2026 - 11:55 CEST
Identified
We are aware of two recently disclosed critical PHP vulnerabilities and are applying available hardening measures. We will deploy the official PHP updates as soon as they are released.