Major incident

Liquid Web - Services: Security Advisory: Linux Privilege Escalation Vulnerability (CVE-2026-31431)

Affected: Cloud Dedicated, Cloud VPS Hosting, CPanel

Current status of Liquid Web - Services: Operational — live Liquid Web - Services status

Timeline

1. May 11, 2026, 22:12 UTC
   identified
   A recently disclosed Linux vulnerability (CVE-2026-31431), sometimes referred to as “Copy Fail,” affects certain Linux distributions and may allow a local, unprivileged user to escalate privileges under specific conditions. This issue has been classified as high severity. Status Our security and operations teams have completed an assessment of our infrastructure and have applied all relevant vendor patches and mitigations to affected systems. Impact No evidence of exploitation has been identified within our environment Systems under our management have been patched or otherwise mitigated Customer Guidance Customers managing their own systems or using unmanaged services should ensure they have applied the latest security updates provided by their Linux distribution and review any related vendor advisories. We will continue monitoring this vulnerability and will provide updates if new information becomes available.
2. Jun 6, 2026, 21:50 UTC
   resolved
   This incident has been resolved.

Updates as published by Liquid Web - Services (original).