Active Incident
PHP Security Vulnerability: Protections Are In PlaceOperational

Incident Status

Operational

Components

Web Services

Locations

Web Hosting, Managed VPS Hosting, DreamPress Hosting, Dedicated Server Hosting


October 21, 2026 1:43PM PDT
MONITORING

We're continuing to roll out PHP's official fix across all servers and expect it to be complete soon. Sites on PHP 8.1 and older are protected by the mitigations we deployed early, before the details were public. Security fixes for these versions, provided under our PHP Extended Support program, are being built and are expected to roll out within the next day. No action is needed on your end. We'll keep you posted and share another update as soon as the rollout is complete.

October 21, 2026 12:55PM PDT
MONITORING

We are continuing to roll out PHP updates across all servers and PHP versions. Our systems remain closely monitored as the final updates finish deploying, and we will share our next update once the deployment is complete.

October 21, 2026 9:04AM PDT
MONITORING

We are currently rolling out PHP's upstream fix fleet-wide. Known attack vectors and confirmed exploit paths across all PHP versions remain closed. Additionally, our Web Application Firewall (WAF) is actively blocking any incoming exploit attempts. We will continue to monitor systems closely as the final upstream fixes finish deploying. The next update will be provided once the fleet-wide deployment is fully complete.

October 21, 2026 6:46AM PDT
MONITORING

Our Operations team has implemented protections against the PHP remote code execution vulnerability across all our hosting platforms, including shared, VPS, DreamPress, and dedicated. These protections are active now, and we have not observed any attack traffic related to this issue to date. Patched PHP versions are being released today. Our Technical Operations team is ready to deploy updated PHP builds as soon as they are available. We'll share another update once the patched builds are available.

Web Services

Web Hosting

Operational

Managed VPS Hosting

Operational

DreamPress Hosting

Operational

VPS (Self-Managed VPS)

Operational

Dedicated Server Hosting

Operational

Remixer Hosting

Operational

Database Hosting

Operational

Domain Registrations

Operational

Security Certificates

Operational

File Manager Interface

Operational

PHPMyAdmin Interface

Operational

Email Services

Email Hosting

Operational

Webmail Interface

Operational

Internal Services

DreamHost Homepage

Operational

DreamHost Web Panel

Operational

DreamHost Billing

Operational

LiveChat Support Interface

Operational

Ticket Support Interface

Operational

Cloud Services

DreamCompute Hosting

Operational

DreamObjects Hosting

Operational

We continuously monitor the status of DreamHost and all its related services. If there are any service interruptions or maintenances, information will be available here. Need help? Please contact support via the DreamHost Panel.