Our legacy customer panel and blog are temporarily offline. We took them down as a precaution after two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed. Your servers and services are not affected and are running normally.

Why is the legacy customer panel offline?
Two critical vulnerabilities were disclosed in PHP, and active exploitation has been reported. The legacy control panel runs on PHP, so we suspended access while we assess and patch it. We have no evidence that customer data or systems have been affected.

Are my servers, VPS, storage or other services affected?
No. Your services are not affected by this shutdown and continue to run as normal.

Can I log in to the legacy customer panel?
No. Login is unavailable until further notice.

How can I manage my services in the meantime?
Use the customer panel at my.contabo.com.

When will the legacy panel be back?
Access will be restored only after the patch has been applied and verified. Any changes will be posted on our status page.

Do I need to do anything?

• If you run PHP applications on your own Contabo services, install the PHP security update as soon as your distribution or vendor releases it. Standard configuration workarounds have been confirmed as ineffective, so patching is the only reliable fix.
• Be alert to phishing emails asking you to log in or "verify" your account. We will never ask for your password by email.

Was my data compromised?
We have no evidence that customer data or systems have been affected.

Still need help? Please contact Contabo Support.