Game Panel & VPS Panel temporarily offline – emergency security patch

Affected services

• Game Panel
• VPS Panel

Timeline

1. 2026-10-21 13:37:09 UTC

   The PHP project has announced two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting the software that powers our Game Panel and VPS Panel. Our team has been monitoring the situation closely since the announcement. After observing suspicious scanning activity against our panels earlier today, we decided to take both panels offline as a precaution until the official fix is installed. We have found no sign of any compromise; this is a purely preventive measure. We apologise for the short notice. - Your game servers and VPSs are still running. Players and services are not affected. - Your files and data are untouched. - Panel features (console, file manager, SFTP login, start/stop, backups and VPS controls) are temporarily unavailable. The patch is scheduled for release today at approximately 14:00 UTC. We expect both panels to be back online within about 30 minutes of its release, and we will post an update here as soon as they are available. Thank you for your patience. The Expanse Team

2. 2026-10-21 13:56:53 UTC

   Both the Game Panel and VPS Panel are back online and fully patched against CVE-2026-109618 and CVE-2026-109619. All features are available again. We found no sign of any compromise during this incident. Thank you for your patience. The Expanse Team

3. 2026-10-21 14:02:50 UTC

   Incident resolved.