Other Notifications - Operational
Other Notifications
Public Website - Operational
Public Website
Core Network - Operational
Core Network
API Services - Operational
API Services
KVM Node 1 - Operational
KVM Node 1
KVM Node 2 - Operational
KVM Node 2
KVM Node 3 - Operational
KVM Node 3
KVM Node 4 - Operational
KVM Node 4
KVM Node 5 - Operational
KVM Node 5
KVM Node 6 - Operational
KVM Node 6
KVM Node 7 - Operational
KVM Node 7
KVM Node 8 - Operational
KVM Node 8
KVM Node 9 - Operational
KVM Node 9
KVM Node 10 - Operational
KVM Node 10
KVM Node 11 - Operational
KVM Node 11
KVM Node 12 - Operational
KVM Node 12
Notice history
View current status01.10.2026
- Completed17.10.2026 at 11:52 AMUTCCompleted17.10.2026 at 11:52 AMUTC
We are pleased to confirm that the scheduled security maintenance has been successfully completed.
All hypervisors across our infrastructure have been updated with the latest security patches and successfully rebooted to ensure the updated kernels are fully activated.
All affected services are expected to be operating normally.
If you experience any issues with your VPS/VDS following this maintenance, please contact our support team by opening a support ticket.
We appreciate your patience and understanding throughout this essential security maintenance.
Kind regards,
AlbHost Team - Update17.10.2026 at 8:00 AMUTCUpdate17.10.2026 at 8:00 AMUTC
Maintenance is now in progress.
- Update17.10.2026 at 8:00 AMUTCUpdate17.10.2026 at 8:00 AMUTC
Maintenance is in progress.
- In progress17.10.2026 at 7:00 AMUTCIn progress17.10.2026 at 7:00 AMUTC
Dear Customers,
We would like to inform you of a recently disclosed critical Linux kernel security vulnerability, identified as CVE-2026-99999 (PwnEscape), which may affect KVM-based virtualization environments.
This vulnerability could potentially allow a malicious virtual machine to bypass isolation boundaries and gain unauthorized access to the underlying physical server under certain conditions.
What actions are we taking?
As a precautionary security measure, AlbHost will be performing kernel and system updates across our virtualization infrastructure, followed by physical server reboots to ensure the updated kernels are properly activated.
During this process:
VPS/VDS instances may experience temporary downtime while their respective hypervisors are rebooted.
Updates and reboots will be performed progressively across our infrastructure to minimize disruption.
Customers do not need to take any action, although we recommend saving ongoing work and ensuring important data is backed up.
Further updates will be published through our official status page.
Please note that this is an upstream Linux kernel security issue and is not specific to AlbHost or Virtualizor.
We apologize for any inconvenience these necessary security maintenance operations may cause. Protecting our infrastructure and customer services remains our highest priority.
Technical Reference: https://www.pwn.ai/blog/pwnescape
Thank you for your understanding and cooperation.
Kind regards,
AlbHost Team.
01.09.2026
No notices reported this month
01.08.2026
- ResolvedUTCResolvedUTC
Dear Customers,
As a final precautionary measure, we will live migrate customer virtual machines from the affected hypervisors to newly deployed, clean hypervisors. This process is designed to minimise disruption and will not require customers to reinstall or reconfigure their VPS.
Once all virtual machines have been safely migrated, the affected hypervisors will be fully wiped and reinstalled from clean installation media before being returned to service.
No action is required from customers during this process. Existing VPS data, configurations and IP addresses will remain unchanged.
We have not identified confirmed evidence that customer VPS instances were accessed or modified as part of this incident. The migration and rebuild are being performed as an additional security precaution to ensure the integrity of our infrastructure.
With these remediation measures now underway, we are closing this incident as resolved. We will continue internal monitoring and security reviews as part of our normal operations.
Thank you for your patience and understanding.
Kind regards,
AlbHost Support. - IdentifiedUTCIdentifiedUTC
Update – Root Cause Confirmed by Virtualizor
Virtualizor has now confirmed that this incident resulted from a BGP hijack affecting part of the Softaculous/Virtualizor infrastructure between 28 August 2026 at approximately 20:57 UTC and 30 August 2026 at approximately 06:10 UTC.
During this period, internet traffic intended for Virtualizor’s update infrastructure was diverted to an attacker-controlled server. The attacker obtained a technically valid TLS certificate, meaning affected update connections did not produce certificate warnings.
Virtualizor has confirmed that a malicious update package was delivered to a small number of installations. It has also confirmed that its update client did not cryptographically verify update packages at the time, allowing the modified package to be accepted.
The timing of the malicious execution observed on our infrastructure matches the incident window published by Virtualizor. Out of our 34 hypervisor nodes:
Five nodes received the malicious package.
No indicators of compromise have been identified on the other 29 nodes at this time.
One of the five affected nodes showed additional manual attacker activity after the initial automated infection.
We have not found confirmed evidence that customer VPS instances were accessed or modified.
The affected nodes have been isolated. Virtualizor API credentials have been reset and restricted, unauthorised access has been removed, and additional infrastructure credentials are being rotated. All five affected hypervisors will be rebuilt from clean installation media.
The unauthorised BGP announcement has ended and normal routing to Virtualizor’s infrastructure has been restored. However, our remediation and forensic review remain ongoing.
As a precaution, we continue to advise all customers to change their AlbHost account password, VPS root or administrator passwords, and any passwords reused elsewhere. Customers should also review their VPS user accounts and SSH
authorized_keysfiles for anything unfamiliar.Virtualizor’s official disclosure is available here:
https://www.virtualizor.com/blog/security-incident-bgp-hijacking/
We will publish another update when the rebuild and investigation have been completed.
- InvestigatingUTCInvestigatingUTC
Hello,
WWe have identified a security incident involving our Virtualizor infrastructure. Evidence of compromise was found on 5 of our 34 hypervisor nodes. We are continuing a full investigation across all nodes.
The affected systems contained unauthorised software with root-level access. We are isolating the affected hosts, removing malicious persistence, rotating infrastructure credentials, and reviewing system, network and SSH activity. Every confirmed affected host will be completely rebuilt from clean media.
At this time, we have no confirmed evidence that individual customer VPS instances were accessed. However, because account credentials may have been exposed, we strongly recommend that all customers take the following precautions:
Change your customer account and control-panel password.
Change the root or administrator password for every VPS.
Review
/root/.ssh/authorized_keysand other users’ SSH key files for unfamiliar entries.Remove any SSH keys you do not recognise.
Change the same password anywhere else if it was reused.
Enable two-factor authentication wherever available.
Use new, unique passwords that have never previously been used. Do not send passwords or private keys to anyone claiming to represent our company.
Our investigation is ongoing, and we will publish further updates as verified information becomes available.
We sincerely apologise for the concern and disruption this incident may cause. Protecting customer systems and providing transparent updates remain our highest priorities.