HEO Systems Status

Precautionary maintenance: critical PHP vulnerabilities on 21 Oct 2026 11:47:29 (UTC+01:00)
Resolved on 21 Oct 2026 17:50:05 (UTC+01:00)
All web servers have been updated to the patched PHP version and all websites are back online. No signs of abuse were found.
In progress on 21 Oct 2026 13:14:06 (UTC+01:00)
We have put mitigations in place on all web servers. All websites that use PHP are offline for now and show a maintenance page. Other websites are online. The client area, webmail and phpMyAdmin remain unavailable. Email, game servers and other services are not affected.

The PHP fix is expected at 14:00 UTC. We will install it as soon as DirectAdmin makes it available, then bring all websites back online and post another update.
Investigating on 21 Oct 2026 11:47:29 (UTC+01:00)
Two critical remote code execution vulnerabilities in PHP were made public before a patch was available. The fix is expected today at 14:00 UTC, and mass attacks are expected shortly after.

As a precaution, we are putting all websites and web servers into maintenance while we look into the right mitigations and prepare for the update. Other services are not affected.

We will post an update as soon as we know more. Thanks for your patience.