We are aware of CVE-2026-99999, a critical Linux kernel vulnerability (CVSS 9.3) publicly disclosed on 15 October 2026. It affects the host systems underlying all Hostinger VPS plans.
We have been tracking it since publication and are patching our entire server fleet as quickly as possible, with fixes deployed gradually as they become available.
Emergency maintenance is in progress. Patching is being carried out in batches, and customer VPS will restart at least once. We will keep each interruption as brief as possible.
Posted Oct 16, 2026 - 11:20 UTC
This incident affects: Core Services (Hostinger VPS API).