PHP has announced a major security flaw in the server side process that allows full remote code execution on the targeted server, our server panel is based on PHP (Livewire) and so is vulnerable to this issue. - Our DNS panel is also vulnerable and will be down for the same period.
We have started to witness irresponsible disclosure of the issue[1] before PHP's scheduled release of the fix at 11PM JST (UTC+9)[2] our downtime is planned until this time at minimum. There is a suggested fix for the issue, but we have been made aware of a Core PHP developer stating[3] that this is insufficient.
To avoid our services being compromised and/or customer data being leaked, we have decided that the safest thing to do is to take our panel offline until the fix is published and we can deploy it. This is also one of the suggested temporary remedies by CERT-EU.[4]
Your services will continue to run and SSH access will still be possible, but you will not be able to use any of the features in the panel, provision new hosts, or pay invoices. Any invoices that would cause server suspension/termination during the time the panel is offline have had a grace period added.
If you need any assistance, such as with restarting your service, you are welcome to contact us via Email or Matrix