64 Liquid Web incidents · november 2025 — official updates, affected components, duration and resolution details.
GitHub rapporterer forringet ydeevne via deres status side i morges: http: / / www.githubstatus.com / Per siden, kan dette problem påvirke Pull Requests, Spørgsmål, Copilot, Handlinger, Webkrogs, og API anmodninger, blandt andre tjenester. Kunderne bør følge GitHubs statusside for de seneste oplysninger.
Denne hændelse er blevet løst.
Automatisk oversat fra den officielle hændelsesopdatering.
We are currently investigating network issues affecting servers in our Phoenix Data Center. During this time, you may experience connectivity disruptions or degraded performance. Our engineers are actively working to identify the root cause and restore service stability as quickly as possible. If you have any questions or require assistance, please contact us via chat or open a support case through portal.liquidweb.com We appreciate your patience and understanding while we work to resolve this issue. Thank you.
Dear Valued Customer, We are currently responding to a critical facilities issue affecting our Phoenix, Arizona data center. A major chiller equipment failure at the facility has significantly reduced cooling capacity, resulting in elevated temperatures and an increased risk of service disruption and potential hardware impact. The data center provider is actively working to restore normal cooling operations. Replacement work is underway, with current estimates indicating repairs may take 10–16 hours or longer. Additional information regarding the facility incident is available on the data center provider's status page: https://status.phoenixnap.com/incidents/dnjp5pfv2mmh Our teams are closely monitoring conditions and working directly with the data center provider to minimize customer impact. To protect customer infrastructure and reduce the risk of hardware damage or data loss, we may need to perform controlled shutdowns of affected systems if facility temperatures reach unsafe levels. Where necessary, we will prioritize orderly shutdown procedures to protect the underlying infrastructure. Customers with services hosted within the affected Phoenix facility should prepare for potential service interruptions while remediation efforts continue. We understand the seriousness of this situation and the impact an extended disruption may have on your business. We will continue to provide updates as conditions change and additional information becomes available. We sincerely apologize for the disruption and appreciate your patience as we work to protect your infrastructure and restore normal operations. Sincerely, Nexcess Support Team
Dear Valued Customer, Update: Our teams are continuing to work closely with our data center provider at the Phoenix location. Our data center teams and on-site vendors continue working to restore adequate cooling. As part of our ongoing mitigation efforts, we are gracefully shutting down impacted systems where necessary to help protect customer data and reduce the risk of data corruption or hardware-related issues while temperatures remain elevated. We apologize for the disruption and appreciate your patience as we work to protect your infrastructure and restore normal operations. We will continue to provide updates as the situation progresses. Sincerely, Nexcess Support Team
Dear Valued Customer, We are continuing to work closely with our provider as they address the elevated temperatures at the Phoenix facility. Progress is being made, and temperatures are continuing to come down as cooling systems are restored and additional mitigation efforts are put in place. We apologize for the disruption and appreciate your patience as we work to protect your infrastructure and restore normal operations. We will continue to provide updates as the situation progresses. For the latest status and updates from the facility, please visit: https://status.phoenixnap.com/incidents/dnjp5pfv2mmh Sincerely, Nexcess Support Team
Internal ambient temperatures in our Phoenix, Arizona data center have continued to moderate and onsite Nexcess Engineers have begun to restore service to networking equipment and other services. Our Senior Engineering and Leadership teams are actively monitoring the situation and will continue to protect customer infrastructure and reduce the risk of hardware damage or data loss where necessary, however at this time customers should begin to see network service restoring to their environments.
Our Nexcess Engineering teams continue working to restore all remaining systems and services in our Phoenix, Arizona data center. While significant progress has been made and many systems have returned to service, our teams are continuing to bring remaining infrastructure back online in a controlled and careful manner. As systems and network services are restored, our Engineering and Operations teams are monitoring them very closely to confirm they remain stable and continue operating as expected. We are also actively watching environmental conditions and infrastructure health throughout the facility to reduce the risk of additional service disruption, hardware damage, or data loss. Work will continue until all affected systems and services have been fully restored. Our Engineering and Leadership teams remain actively engaged, and we will continue to provide updates as restoration efforts progress and overall service stability is confirmed.
Our Nexcess Engineering teams have successfully brought the majority of systems and services in our Phoenix, Arizona data center back online, and work continues actively to restore the remaining pending services. For all restored systems, our teams are conducting thorough checks across the infrastructure to confirm complete stability and ensure there is no ongoing operational impact. Out of an abundance of caution, we continue to closely monitor facility environmental conditions and overall infrastructure health. We will provide further updates in this space as restoration and verification efforts progress.
Our Nexcess Engineering teams have brought the majority of systems and services in our Phoenix, Arizona data center back online, and work remains actively underway to restore the remaining pending services. Over the past several hours, we have observed continued stability across all restored systems with no red flags identified. Out of an abundance of caution, our teams are continuing to perform ongoing checks and closely monitor facility environmental conditions alongside overall infrastructure health. We will provide further updates in this space as restore and verification efforts progress.
The vast majority of impacted servers have been brought online and are functional at this time. We continue to monitor the stability of the network to ensure normal operations. Our engineers are still working on restoring functionality to the Cloud Sites Platform but are making progress. The root cause has been identified and progress is being made. Updates and more information regarding those efforts can be found on our Cloud Sites Status Page here: https://status.websitesettings.com/incidents/0l8hyyhr6v93
We have restored all services and observed continued stability. We will keep a close eye on the platform and continue to update this page with any new developments.
All post-outage cleanup activities have been completed, and everything is working as expected. We will continue to monitor the environment, and this incident is now resolved.
A security vulnerability, CVE-2026-65640, has been identified in WordPress that could allow an authenticated Author-level or higher user to achieve remote code execution through a malicious file upload on sites using Imagick and Ghostscript. The vulnerability has been addressed through updates across supported WordPress branches. Patched Versions: Customers should update to the following patched version for their respective WordPress branch: 7.0.4 6.9.7 6.8.8 6.7.7 6.6.7 6.5.10 6.4.10 6.3.10 6.2.11 6.1.12 6.0.14 5.9.16 5.8.15 5.7.17 5.6.19 5.5.20 5.4.21 5.3.23 5.2.26 5.1.24 5.0.27 4.9.31 4.8.30 4.7.35 Recommended Action: Customers are strongly encouraged to update WordPress core to the latest available patched version and ensure automatic updates are enabled where appropriate. Customers with automatic updates enabled should receive the applicable update automatically. However, we recommend verifying the currently running WordPress version to ensure the security update has been successfully applied. We will continue to monitor the situation and provide further updates if required. If you need assistance or have any concerns, please reach us via live chat or via a case. Additional information: https://wordpress.org/news/2026/08/wordpress-7-0-4-release/ https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w
A high-severity reflected XSS vulnerability, CVE-2026-64638, has been identified in the WordPress login interface. Exploitation requires a victim to visit a specially crafted URL and, under specific conditions, could potentially lead to PHP code execution. Impacted versions Impacted versions: WordPress 4.7 – 7.0.2 (every release on every branch) WordPress 4.6 and earlier — end of life, no patch available Fixed versions: WordPress 7.0.3 WordPress 6.9.6 WordPress 6.8.7 Equivalent minor releases on every remaining supported branch back to 4.7 Recommended Action Customers are strongly encouraged to update WordPress core and ensure automatic security updates are enabled where appropriate. Since exploitation requires user interaction, customers should also remain vigilant against phishing attempts and avoid clicking suspicious or unsolicited links. Customers with automatic security updates enabled should receive the applicable update automatically; however, we recommend verifying the currently running WordPress version. There is currently no reported evidence of widespread exploitation in the wild. We will continue to monitor the situation and provide further updates if required. If you need assistance or have any concerns, please contact our Support team.
Vi undersøger intermitterende forbindelse og øget latency påvirker nogle tjenester hostet i VMware MT miljø. Vores ingeniører arbejder aktivt på at identificere årsagen og genoprette normal service så hurtigt som muligt. Vi sætter pris på Deres tålmodighed og forståelse, mens vi arbejder på at løse dette problem. Hvis du har spørgsmål eller bekymringer, bedes du åbne en supportbillet eller kontakte os via chat.
Service er blevet genoprettet på dette tidspunkt, og de berørte VMware MT- hostede tjenester fungerer normalt. Tak for Deres tålmodighed og forståelse, mens vores hold arbejdede på at løse dette problem.
Automatisk oversat fra den officielle hændelsesopdatering.
Den 17. juli meddelte wordpress.org to kritiske eksterne kode udførelse (RCE) sårbarheder almindeligt kendt som WP2Shell. Disse sårbarheder findes i Wordpress Core og tillade en ubekræftet anmodning om at udføre vilkårlig kode på målet hjemmeside. Kunder, der kører wordpress versioner nedenfor er stærkt rådes til at opgradere til nyeste version vist så hurtigt som muligt: Wordpress 6.8.x; fast i 6.8.6 WordPress 6.9.x; fast i 6.9.5 WordPress 7.0.x; fast i 7.0.2 WordPress 7.1 beta, fast i 7.1 beta2 http: / / wordpress.org / news / 2026 / 07 / wordpress- 7-0-2-release / Sendt for 2 minutter siden. 17 jul, 2026 - 21: 44 ED
Vores hold fortsætter med at arbejde flittigt for at vurdere virkningen af den nyligt afslørede WordPress Core sårbarheder og kontrollere, at passende afbødende foranstaltninger er på plads. Vi er fortsat aktivt involveret i vores undersøgelse og overvåger situationen for enhver ny udvikling. Vi vil fortsat nøje overvåge situationen og træffe de yderligere foranstaltninger, der er nødvendige for at opretholde systemets sikkerhed og stabilitet. Hvis du har brug for hjælp eller har nogen bekymringer, bedes du kontakte vores Support team.
Tjenester er blevet genoprettet, og hjemmesider er i øjeblikket indlæses som forventet. Vores netværksteam undersøger fortsat den underliggende årsag og overvåger aktivt miljøet for at sikre stabilitet. På nuværende tidspunkt synes alle tjenester at fungere normalt. Hvis du oplever problemer eller har brug for hjælp, bedes du kontakte vores Support team.
Spørgsmålet er blevet identificeret, og et fix er ved at blive gennemført.
Vi fortsætter med at arbejde på en løsning på dette problem.
I betragtning af sværhedsgraden af denne sårbarhed, har Flydende Web Systems Engineers været proaktivt opgradering berørte wordpress applikationer på tværs af vores flåde. Kunderne er stadig stærkt opfordret til at gennemgå deres wordpress hjemmesider og, hvis det er berørt, at opdatere til den lappede version så hurtigt som muligt.
Denne hændelse er blevet løst.
Automatisk oversat fra den officielle hændelsesopdatering.
En delmængde af servere i vores Phoenix, AZ datacenter mistede strøm. Vores team undersøger det.
Den primære magt er blevet genoprettet, og vi overvåger situationen.
Denne hændelse er blevet løst.
Automatisk oversat fra den officielle hændelsesopdatering.
Vi undersøger et problem, der påvirker Apache tjenester på vores servere efter en nylig opdatering af EasyApache ModSecurity. Kunder på berørte servere kan opleve hjemmesider, der ikke er tilgængelige, HTTP fejl, eller forbindelse timeouts. Vores ingeniørhold arbejder i øjeblikket på at gendanne tjenester. Har du brug for hjælp? Chat med os eller oprette en billet via my.liquidweb.com. Vi sætter pris på din tålmodighed og forståelse, mens vi arbejder på at genoprette normal service.
Et fix er blevet implementeret, og vores Engineering team overvåger de berørte servere for at bekræfte Apache tjenester forbliver stabile.
Denne hændelse er blevet løst.
Automatisk oversat fra den officielle hændelsesopdatering.
Vores team er i øjeblikket at vurdere virkningen og omfanget af Januscape sårbarhed (CVE- 2026- 53359), og dens indvirkning på servere i vores flåde og den bedste måde at anvende patches på vores hosting infrastruktur. Vi sender kommunikation til alle berørte kunder, mens vi arbejder på at gennemføre de nødvendige lempelser. Næste skridt: Holdene er i øjeblikket i gennemgang af sårbarhed; efterfølgende statusopdateringer vil følge.
Vores hold fortsætter med at implementere de krævede sikkerhedsopdateringer på tværs af de berørte systemer som reaktion på Januscape sårbarhed (CVE- 2026- 53359). Som en del af denne oprensning, nogle systemer kræver en kontrolleret genstart for at fuldføre klappeprocessen. Efter hver genstart, vi validerer systemets tilgængelighed, service sundhed, og netværksforbindelse. Systemer, der ikke vender tilbage til tjenesten som forventet, bliver aktivt undersøgt og genoprettet af vores driftsteam. Vi forstår vigtigheden af at opretholde tilgængeligheden og arbejder omhyggeligt for at fuldføre denne oprensning samtidig med at minimere kundernes indvirkning. Yderligere opdateringer vil blive leveret som patching og validering indsats fortsætte.
Sikkerhedsopdateringer er blevet anvendt på tværs af Flydende Web flåde.
Automatisk oversat fra den officielle hændelsesopdatering.
Det er blevet bragt til vores opmærksomhed, at en stor delmængde af vores cPanel kunder ser en fejlmeddelelse, når de forsøger at logge ind WHM. "Ugyldig licensfil. Forkert myndighed, der leverer licensen". WebPros (cPanel) er klar over problemet, og de er i øjeblikket undersøge. Vi sætter pris på Deres tålmodighed, når de arbejder på at løse problemet.
cPanel har arbejdet på at forbedre ydeevnen af deres licensservere og gennemført ændringer. Vi ser adgang til WHM og cPanel genoprettet uden indgriben fra støtte. Hvis du stadig har problemer, bedes du række ud for at støtte, og vi vil med glæde hjælpe.
WebPros har erklæret, at problemet er blevet løst, og at servere bør begynde at forny licenser korrekt. Hvis du stadig oplever problemer logge ind, er du velkommen til at kontakte os via chat eller e-mail, og vi kan fremskynde beslutningen.
Vi har observeret fortsat stabilitet, og cPanel licens opdateringer er gået glat indtil videre. Hvis du har brug for yderligere hjælp, så tøv ikke med at kontakte vores supporthold via chat eller e-mail.
Automatisk oversat fra den officielle hændelsesopdatering.
Vi undersøger problemer, der påvirker servere i Phoenix Data Center. Du kan opleve forbindelsesproblemer. Vores ingeniører undersøger sagen for at isolere årsagen og genoprette stabiliteten. Har du brug for hjælp? Chat med os eller oprette en sag via my.liquidweb.com. Vi sætter pris på din tålmodighed og forståelse, mens vi arbejder på at genoprette denne service. Tak.
Vi undersøger et problem, der påvirker forbindelsen mellem vores Phoenix Data Center og interne tjenester. Vi har identificeret, at problemet er relateret til netværksforbindelse med en opstrømsleverandør under et planlagt vedligeholdelsesvindue. På nuværende tidspunkt forventes kundeorienterede tjenester at forblive tilgængelige fra offentlige net, og vi har ikke identificeret en udbredt indvirkning på eksterne tilgængelige tjenester. Vores Ingeniører arbejder aktivt med opstrøms udbyder til at genoprette fuld forbindelse så hurtigt som muligt. Har du brug for hjælp? Chat med os eller oprette en sag via my.liquidweb.com. Vi sætter pris på din tålmodighed og forståelse, mens vi arbejder på at genoprette denne service. Tak.
Vi ser fortsat forbedring i netværksforbindelse, da de berørte links begynder at komme sig. Alle kundehjemmesider og servere forbliver online og tilgængelige. Den planlagte vedligeholdelse er stadig i gang, og vores Engineering team er aktivt at overvåge miljøet for at sikre tilslutning er fuldt restaureret. Vi vil fortsætte med at levere opdateringer, efterhånden som yderligere oplysninger bliver tilgængelige. Har du brug for hjælp? Chat med os eller oprette en sag via my.liquidweb.com. Vi sætter pris på din tålmodighed og forståelse, mens vi arbejder på at genoprette denne service. Tak.
Vi har overvåget situationen, og alt er forblevet stabilt. Denne hændelse er nu løst.
Automatisk oversat fra den officielle hændelsesopdatering.
Vi rådgiver alle kunder ved hjælp af WordPress at kontrollere, at følgende plugins er opdateret til de nyeste tilgængelige versioner. Nyligt afslørede sårbarheder påvirker ældre versioner af disse plugins: CVE- 2026- 6279 - Avada Builder (Fusion Builder) - Uautentificeret fjernbetjening af kode Berørte versioner: 3.15.2 og tidligere CPE- 2026- 10795 - Backup Plugin - Authentication bypass Berørte versioner: 1.26.4 og tidligere Disse sårbarheder kan tillade uautoriserede angribere at få kontrol over sårbare WordPress sites og kompromittere WordPress brugerkonti, hvis plugins ikke er blevet opdateret til de nyeste tilgængelige versioner. Hvis din hjemmeside bruger en af disse plugins, anbefaler vi stærkt, at du: Opdatér de berørte plugin (er) til den nyeste tilgængelige version med det samme. Gennemgå din WordPress installation for uventede administrator konti, plugins, eller ændrede filer. Kontakt vores supporthold, hvis du mener, at din hjemmeside er blevet påvirket, eller hvis du har brug for hjælp til at gennemgå din installation.
Denne rådgivning afsluttes nu. Vi opfordrer vores kunder til at sikre, at alle berørte WordPress plugins er blevet opdateret til de nyeste tilgængelige versioner og fortsætte efter WordPress sikkerhed bedste praksis. Hvis du mener, at din hjemmeside kan have været påvirket eller har brug for hjælp, bedes du kontakte vores Support team.
Automatisk oversat fra den officielle hændelsesopdatering.
Vi er opmærksomme på et netværksarrangement, der påvirker en undergruppe af kunder i vores DC3 Data Center i Lansing, Michigan. Flydende Web Network Engineers er i øjeblikket engageret og arbejder på at gendanne service så hurtigt som muligt. Vi vil give en anden opdatering så hurtigt som muligt her til morgen med flere oplysninger.
Flydende Web Network Engineers har identificeret årsagen og gennemført en rettelse, netværk trafik er genoptaget på dette tidspunkt til berørte områder af datacentret. Vi overvåger aktivt miljøet. Vi vil give en anden opdatering så hurtigt som muligt her til morgen med flere oplysninger.
Denne hændelse er blevet løst.
Automatisk oversat fra den officielle hændelsesopdatering.
We are currently experiencing a partial degradation in our monitoring and alerting system. Some monitoring components are intermittently unable to generate or relay alerts as expected. Our engineering teams are actively investigating the issue to identify the cause and restore full monitoring functionality. We appreciate your patience and understanding while we work to resolve this issue. If you have any questions or concerns, please open a support ticket or contact us via chat.
We are currently experiencing a service degradation affecting our monitoring infrastructure and monitoring ticket integration. As a result, some monitoring alerts may be delayed in being generated, delivered, or escalated to our teams. Customer services themselves are not impacted by this issue; however, the delay in alert processing may result in slower detection and response to service-related incidents. Our engineers are actively investigating and working to restore normal monitoring performance as quickly as possible. We appreciate your patience and understanding while we work to resolve this issue. If you have any questions or concerns, please open a support ticket or contact us via chat.
Our teams have implemented a fix for the issue affecting the monitoring system and are continuing to monitor the service to ensure stability. We will provide additional updates if any further issues are identified. Thank you for your patience.
This incident has been resolved.
We are investigating an issue preventing customers from reaching support via Phone. Please use Live Chat or open a Support Case at my.liquidweb.com for immediate assistance while we restore the phone service. We appreciate your patience and understanding as we work to restore this service. Thank you.
Our phone system is now back online, and agents should be able to connect and accept calls. We will continue to monitor the system to ensure stability. Thank you for your continued patience.
This incident has been resolved.
A recently disclosed vulnerability (CVE-2026-48172) in the LiteSpeed user-end cPanel plugin allows an unprivileged user to escalate to root privileges in plugin versions between v2.3 and v2.4.4. This issue has been classified as high severity. Public reports suggest the vulnerability was being exploited in the wild in May 2026, and indicators of compromise have been published. On May 19th cPanel issued a separate update which disabled and removed the plugin. This vulnerability is patched in v2.4.7 of the user-end plugin and v5.3.1.0 of the WHM plugin (which bundles the user-end plugin). Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-48172 https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/ https://support.cpanel.net/hc/en-us/articles/40599423437079-Security-LiteSpeed-plugin-automatically-removed-during-nightly-update-May-19-2026 Status Our security and operations teams are completing an assessment of our infrastructure and will force a upcp update today for all systems we are able to reach. We plan to review for Indicators of Compromise following the updates. Customer Guidance Customers managing their own systems or using unmanaged services should ensure they have applied the latest security updates or have removed the plugin. Customers should also review their systems for indicators of compromise using the information provided in the LiteSpeed blog article. Should you need any assistance or have any questions or concerns, you can reach us through the following channels: Live Chat via the Customer Portal: https://my.liquidweb.com Email: [email protected] We will continue monitoring this vulnerability and will provide updates if new information becomes available.
Status Update Our security and operations teams completed the assessment of our infrastructure, which forcd a upcp update today for all systems we were able to reach. We also reviewed environments for the indicators of compromise noted in the LiteSpeed article below. We will address any findings via a support ticket. We are resolving this incident at this time. Customer Guidance Customers are strongly encouraged to ensure they are running the updated version of the LiteSpeed plugin and to review their systems for the indicators of compromise. If our team does not have access to your system because it is unmanaged, self-managed, or access has been updated but not shared with Liquid Web, then we would not have been able to reach your system in order to apply updates or check for indicators of compromise. If you have any questions or concerns, you can reach us through the following channels: Live Chat via the Customer Portal: https://my.liquidweb.com Email: [email protected]
We are investigating an issue preventing customers from accessing the portal through login.liquidweb.com. Updates are forthcoming as more information becomes available. Need help? Chat with us or contact Support for assistance. We appreciate your patience and understanding as we work to restore portal access. Thank you.
We are continuing to investigate the issue impacting access to the portal through login.liquidweb.com. While the site may be loading for some users, our teams are still reviewing the issue and working to confirm full service stability. Updates will be provided as more information becomes available. Thank you for your patience while we continue working toward a resolution.
Access to the portal through login.liquidweb.com has been restored, and the site is now loading successfully. Our teams have implemented a fix and are continuing to monitor the service to ensure stability. We will provide additional updates if any further issues are identified. Thank you for your patience while we worked to restore access.
This incident has been resolved.
A recently disclosed Linux vulnerability (CVE-2026-31431), sometimes referred to as “Copy Fail,” affects certain Linux distributions and may allow a local, unprivileged user to escalate privileges under specific conditions. This issue has been classified as high severity. Status Our security and operations teams have completed an assessment of our infrastructure and have applied all relevant vendor patches and mitigations to affected systems. Impact No evidence of exploitation has been identified within our environment Systems under our management have been patched or otherwise mitigated Customer Guidance Customers managing their own systems or using unmanaged services should ensure they have applied the latest security updates provided by their Linux distribution and review any related vendor advisories. We will continue monitoring this vulnerability and will provide updates if new information becomes available.
This incident has been resolved.
We have been made aware of an incident that is affecting Let's Encrypt. The third party SSL provider is currently not issuing SSL certificates as they investigate the issue further. More information is available at at Let's Encrypts status page here: https://letsencrypt.status.io/ If you have any additional questions please reach out to our support team and we will be happy to assist
Let's Encrypt has updated their status post indicating that they are resuming their typical issuance of certificates. We will continue to monitor to see if there are any changes in their status going forward
This incident has been resolved.