All dataforest cloud nodes and all legacy PHP-Friends hosts have been patched and rebooted with only 5 to 10 minutes of downtime. The Avoro virtualization cluster requires additional preparation that was not anticipated, so no reboots have taken place there yet. We are therefore extending the maintenance window by two days for Avoro only. The first reboots will begin in 10-12 hours.
Posted Oct 19, 2026 - 01:15 CEST
Update
All dataforest cloud nodes and the majority of legacy PHP-Friends hosts have already been patched and rebooted. We are well ahead of schedule and will pause maintenance overnight. Patching and reboots will resume in the morning.
Posted Oct 18, 2026 - 00:37 CEST
Update
25% of VMs have already been rebooted. You can check your system's uptime: if it was rebooted (by dataforest) recently, the maintenance for this VM has been completed. If not, the reboot is still pending.
Posted Oct 17, 2026 - 22:34 CEST
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 17, 2026 - 16:30 CEST
Scheduled
Updated maintenance schedule: Start: 17.10.2026 16:30 CEST End: 21.10.2026 23:59 CEST
A critical security vulnerability known as "PwnEscape" has been discovered in KVM, the virtualization technology powering our infrastructure. This flaw potentially affects all virtual servers across our infrastructure. Over the past 24 hours, our team has analyzed the threat and developed an immediate mitigation plan.
This is one of the most severe vulnerabilities reported in KVM to date. While there are currently no public exploits available to compromise host systems, we expect this to change imminently. To ensure the security of our infrastructure and our customers, we need to carry out this maintenance without unnecessary delays.
Affected products This maintenance applies to every type of virtual server in our infrastructure, including: - Seeds in the dataforest cloud - Virtualized Avoro products (VPS, Rootserver, Power Rootserver, NVMe vServer, Compute vServer, Cloud Server) - Every PHP-Friends vServer; both managed and unmanaged - Our Plesk web hosting systems and TeamSpeak 3 servers (as these are hosted on the same virtualization platform)
What we are doing Our engineers will work in multiple shifts to apply a security patch to all host systems, which requires a reboot of all virtual servers. The maintenance will begin in approximately 2 hours and is expected to take up to 48 hours. Given the scale of the operation, we are unfortunately unable to arrange individual maintenance windows. Should we need to adjust the schedule, we will update this post.
Expected impact - We expect a brief downtime of 5 to 15 minutes per virtual server. If your server is unreachable for more than 15 minutes, please check this post for updates regarding potential host-specific issues. If there are no known issues listed, please contact our support. - For unmanaged server customers: Ensure your VM is reboot-safe. Configure critical software to autostart on boot and terminate cleanly upon a shutdown signal from the host. Please understand that we cannot take responsibility for the internal configuration of unmanaged servers. - For managed, webhosting, and TeamSpeak 3 customers: You do not need to take any action. Our team manages the configuration and safe reboot of your services automatically.
Posted Oct 17, 2026 - 14:43 CEST
This scheduled maintenance affects: Datacenter MC-FRA01 (Virtual Servers, Plesk Web Hosting, TeamSpeak3 Servers).