Minor incident

OnlyDomains: Monitoring: Industry-Wide PHP Vulnerability

Affected: Website

Current status of OnlyDomains: Operational — live OnlyDomains status

Timeline

1. Oct 21, 2026, 06:00 UTC
   investigating
   We are aware of reports regarding a recently disclosed PHP vulnerability affecting PHP installations globally. As a precautionary measure, OnlyDomains has implemented protective controls across relevant systems while our Infrastructure team continues to assess the situation and monitor vendor guidance. These measures may temporarily impact some functionality; however, they have been implemented to reduce potential security risk. At this time, there is no evidence of any impact to OnlyDomains systems or customer data. Further updates will be provided if there are any material developments.
2. Oct 22, 2026, 01:35 UTC
   monitoring
   Update: All cPanel hosting servers have now been patched against the recently disclosed PHP vulnerability. The temporary mitigation measures previously implemented remain in place while we validate the vendor fixes and restore affected functionality. We are actively working to remove these controls as quickly and safely as possible. Further updates will be provided as restoration activities progress.
3. Oct 22, 2026, 07:16 UTC
   monitoring
   The PHP patch has been applied to all affected cPanel servers and the temporary mitigations have been removed. Services are operating normally at the moment.
4. Oct 23, 2026, 01:48 UTC
   resolved
   This incident has been resolved.

Updates as published by OnlyDomains (original).