Hypernode Status

Resolved: This incident has been resolved.

Monitoring: Update: Platform Status

Hypernode is fully operational again, and all PHP versions have been patched.

We are still working on the remaining updates for Hipex and will provide another update as soon as there is further progress.

Monitoring: PHP Security Patches Completed

All PHP versions on the Hypernode platform have now been successfully patched for the vulnerabilities CVE-2026-109618 and CVE-2026-109619.

The rollout is complete across all supported and End-of-Life (EOL) PHP versions.

Thank you for your patience and understanding throughout the maintenance. We apologize for any inconvenience caused.

Identified: Update on PHP Security Patches

Most servers running PHP 8.2 through PHP 8.5 have now been successfully updated and are back online. If your website is still in maintenance mode or is not accessible, please let us know so we can investigate.

For the EOL PHP versions, we are still waiting for the required patch packages to become available. As soon as these packages are released, we will proceed with applying the patches and bringing the remaining affected servers back online.

Thank you for your patience and understanding. We will share another update as soon as we have further news.

Identified: Update on PHP Security Patches

We are now bringing Hypernodes running PHP 8.2 through PHP 8.5 out of maintenance mode.

At the same time, we are actively applying the security patches to the EOL PHP versions across the Hypernode platform. These Hypernodes will be brought back online as soon as the patches have been successfully applied.

We will continue monitoring the rollout and keep you updated on further progress.

Thank you for your patience and understanding.

Identified: Update on PHP Security Patches

We are currently rolling out the official PHP security patches across the Hypernode platform.

We expect the first websites to be back online by 16:45 CEST. The rollout will continue across the remaining Hypernodes, and we will bring each site back online as soon as the patches have been successfully applied.

We appreciate your patience and will keep you updated on further progress.

Identified: Update on PHP Security Patches

The official PHP security patches for CVE-2026-109618 and CVE-2026-109619 are now available.

We are currently working on implementing the patches on the Hypernode platform and will start rolling them out across our infrastructure shortly.

Once the patches have been successfully applied to your Hypernode, we will bring it back online as soon as possible.

We will keep you updated on the progress and notify you when the maintenance is completed.

Thank you for your patience and understanding.

Identified: Update on PHP Security Patches

We are still waiting for the official PHP patches to become available.

The expected end of maintenance has been extended to 16:30 CEST. In the meantime, the temporary security measures remain in place on all Hypernodes to mitigate the vulnerabilities. Once the official patches are released, we will apply them as soon as possible and bring any affected Hypernodes back online.

No action is required from your side. We will keep you updated as soon as we have more information.

Identified: Due to a current PHP security vulnerability, Hypernode will perform emergency maintenance today. Starting at 14:30 CEST, your Hypernode will be temporarily taken offline, and a maintenance page will be displayed instead of your website.

The official PHP security patches are scheduled for release at 15:00 CEST (13:00 UTC). Once the patches have been released and successfully applied, and we have verified that the environment is safe, we will bring your Hypernode back online.

We expect the maintenance to last until approximately 15:30 CEST (13:30 UTC). However, if the official patches are delayed or additional time is required to apply them, the maintenance may take longer.

No action is required on your part. We will handle the necessary updates and restore your Hypernode as soon as it is safe to do so.

Please monitor our status page for updates throughout the maintenance:

https://www.hypernode-status.com/

We apologise for the inconvenience and appreciate your understanding as we take the necessary measures to protect your environment.

Identified: Hypernode is addressing two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, announced on October 21, 2026. Under certain conditions, these vulnerabilities could allow attackers to execute malicious code.

• Platform-wide mitigation: Hypernode has deployed additional PHP configuration settings across all nodes:
  • session.upload_progress.enabled = 0
  • session.use_strict_mode = 1
• Security patches: Corrected PHP packages will be installed as soon as they become available for the relevant PHP versions.
• Extended support: Customers using older PHP versions with Hypernode PHP Extended Support are also covered.
• Customer impact: No customer action is required. Customers should not revert the temporary PHP settings themselves.
• Potential disruption: PHP restarts may cause brief interruptions, but Hypernode aims to minimise any impact on store availability.

The configuration changes are temporary mitigations and do not replace the official security patches.

Resolved: We have not observed any further DDoS activity targeting the infrastructure nameservers. The situation remains stable, and services are operating normally.

Monitoring: Earlier, we experienced issues with the nameservers at our infrastructure partner. It has since become clear that these issues were caused by a DDoS attack targeting the nameservers.

The attack now appears to have calmed down, and we are seeing operations return to normal levels.

We will continue to monitor the situation closely to ensure everything remains stable. For now, things are looking good, and we don't expect any further issues in the short term.

We will provide another update if the situation changes.

Identified: If your DNS configuration makes use a CNAME record ending in hypernode.io, the hostname may currently fail to resolve, resulting in downtime for the affected domains. Customers who have configured their DNS using an IPv4 A record are not affected by this issue.

If possible, we recommend temporarily replacing your CNAME record with an A record pointing to the appropriate IP address to restore your environment. Please ensure you use the correct IP address for your Hypernode. You can find this by using the following bash command:

dig -t A yournode.hypernode.io @nsa.byte.nl +short

In the meantime, we remain in close contact with our infrastructure provider and are actively monitoring the situation while they work on a resolution.

The Hypernode Team

Investigating: We are aware of the issues currently affecting our platform, which appear to be DNS-related. Our infrastructure partner is treating this as a top priority and is actively working to resolve the issue.

We understand that these disruptions are impacting your operations, and we sincerely apologize for the inconvenience. We are doing everything we can to restore the service as quickly as possible.

Resolved: This incident has been resolved.

Monitoring: Update: Platform Status

Hypernode is fully operational again, and all PHP versions have been patched.

We are still working on the remaining updates for Hipex and will provide another update as soon as there is further progress.

Monitoring: PHP Security Patches Completed

All PHP versions on the Hypernode platform have now been successfully patched for the vulnerabilities CVE-2026-109618 and CVE-2026-109619.

The rollout is complete across all supported and End-of-Life (EOL) PHP versions.

Thank you for your patience and understanding throughout the maintenance. We apologize for any inconvenience caused.

Identified: Update on PHP Security Patches

Most servers running PHP 8.2 through PHP 8.5 have now been successfully updated and are back online. If your website is still in maintenance mode or is not accessible, please let us know so we can investigate.

For the EOL PHP versions, we are still waiting for the required patch packages to become available. As soon as these packages are released, we will proceed with applying the patches and bringing the remaining affected servers back online.

Thank you for your patience and understanding. We will share another update as soon as we have further news.

Identified: Update on PHP Security Patches

We are now bringing Hypernodes running PHP 8.2 through PHP 8.5 out of maintenance mode.

At the same time, we are actively applying the security patches to the EOL PHP versions across the Hypernode platform. These Hypernodes will be brought back online as soon as the patches have been successfully applied.

We will continue monitoring the rollout and keep you updated on further progress.

Thank you for your patience and understanding.

Identified: Update on PHP Security Patches

We are currently rolling out the official PHP security patches across the Hypernode platform.

We expect the first websites to be back online by 16:45 CEST. The rollout will continue across the remaining Hypernodes, and we will bring each site back online as soon as the patches have been successfully applied.

We appreciate your patience and will keep you updated on further progress.

Identified: Update on PHP Security Patches

The official PHP security patches for CVE-2026-109618 and CVE-2026-109619 are now available.

We are currently working on implementing the patches on the Hypernode platform and will start rolling them out across our infrastructure shortly.

Once the patches have been successfully applied to your Hypernode, we will bring it back online as soon as possible.

We will keep you updated on the progress and notify you when the maintenance is completed.

Thank you for your patience and understanding.

Identified: Update on PHP Security Patches

We are still waiting for the official PHP patches to become available.

The expected end of maintenance has been extended to 16:30 CEST. In the meantime, the temporary security measures remain in place on all Hypernodes to mitigate the vulnerabilities. Once the official patches are released, we will apply them as soon as possible and bring any affected Hypernodes back online.

No action is required from your side. We will keep you updated as soon as we have more information.

Identified: Due to a current PHP security vulnerability, Hypernode will perform emergency maintenance today. Starting at 14:30 CEST, your Hypernode will be temporarily taken offline, and a maintenance page will be displayed instead of your website.

The official PHP security patches are scheduled for release at 15:00 CEST (13:00 UTC). Once the patches have been released and successfully applied, and we have verified that the environment is safe, we will bring your Hypernode back online.

We expect the maintenance to last until approximately 15:30 CEST (13:30 UTC). However, if the official patches are delayed or additional time is required to apply them, the maintenance may take longer.

No action is required on your part. We will handle the necessary updates and restore your Hypernode as soon as it is safe to do so.

Please monitor our status page for updates throughout the maintenance:

https://www.hypernode-status.com/

We apologise for the inconvenience and appreciate your understanding as we take the necessary measures to protect your environment.

Identified: Hypernode is addressing two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, announced on October 21, 2026. Under certain conditions, these vulnerabilities could allow attackers to execute malicious code.

• Platform-wide mitigation: Hypernode has deployed additional PHP configuration settings across all nodes:
  • session.upload_progress.enabled = 0
  • session.use_strict_mode = 1
• Security patches: Corrected PHP packages will be installed as soon as they become available for the relevant PHP versions.
• Extended support: Customers using older PHP versions with Hypernode PHP Extended Support are also covered.
• Customer impact: No customer action is required. Customers should not revert the temporary PHP settings themselves.
• Potential disruption: PHP restarts may cause brief interruptions, but Hypernode aims to minimise any impact on store availability.

The configuration changes are temporary mitigations and do not replace the official security patches.