Januscape Vulnerability (CVE-2026-53359)
Identified - Our teams are continuing to deploy the required security updates across affected systems in response to the Januscape Vulnerability (CVE-2026-53359). As part of this remediation, some systems require a controlled reboot to complete the patching process.

Following each reboot, we are validating system availability, service health, and network connectivity. Systems that do not return to service as expected are being actively investigated and restored by our operations teams.

We understand the importance of maintaining availability and are working carefully to complete this remediation while minimizing customer impact. Additional updates will be provided as patching and validation efforts continue.
Jul 13, 2026 - 13:51 EDT
Investigating - Our team is currently assessing the impact and scope of Januscape Vulnerability (CVE-2026-53359), and its impact on servers in our fleet and the best way to apply patches to our hosting infrastructure.

We will be sending communications to any affected customers as we work to apply the necessary mitigations.

Next Steps:
Teams are currently in review of vulnerability; subsequent status updates will follow.
Jul 09, 2026 - 10:36 EDT
Uptime over the past 90 days. View historical uptime.
Support Services Operational
Tickets Operational
Phones Operational
Chats Operational
Help Center Operational
Platform Operations Operational
Web Services Operational
DNS Operational
SSH/FTP Operational
Email Operational
MySQL Operational
InterWorx Control Panel Operational
Cluster / NFS Operational
Platform Updates / Other Operational
Managed Wordpress Operational
Wordpress Core Updates Operational
Wordpress Plugin Updates via Visual Compare Operational
Nexcess Cloud Operational
us-midwest-1 Operational
us-west-1 Operational
uk-south-2 Operational
nl-west-1 Operational
au-south-1 Operational
us-midwest-2 Operational
Cloud Container Services Operational
us-midwest-1 Operational
us-west-1 Operational
uk-south-2 Operational
nl-west-1 Operational
au-south-1 Operational
us-midwest-2 Operational
Nexcess Global DNS Operational
Customer Portal Operational
Safe Harbor Updates Operational
Data Centers & Network Operational
90 days ago
100.0 % uptime
Today
Southfield, MI (MEL) Operational
90 days ago
100.0 % uptime
Today
Dearborn, MI (OTR) Operational
90 days ago
100.0 % uptime
Today
San Jose, CA (SJC) Operational
90 days ago
100.0 % uptime
Today
Miami, FL (MIA) Operational
90 days ago
100.0 % uptime
Today
Surrey, UK (LHR) Operational
90 days ago
100.0 % uptime
Today
West Sussex, UK (LGW) Operational
90 days ago
100.0 % uptime
Today
Amsterdam, NL (AMS) Operational
90 days ago
100.0 % uptime
Today
Sydney, AU (SYD) Operational
90 days ago
100.0 % uptime
Today
Lansing, MI (DC3) Operational
90 days ago
100.0 % uptime
Today
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Jul 28, 2026

No incidents reported today.

Jul 27, 2026

No incidents reported.

Jul 26, 2026

No incidents reported.

Jul 25, 2026

No incidents reported.

Jul 24, 2026

No incidents reported.

Jul 23, 2026
WP2Shell Wordpress Core Critical Remote Code Execution Vulnerabilities, CVE-2026-60137 and CVE-2026-63030
Resolved - This incident has been resolved.
Jul 23, 15:45 EDT
Monitoring - The Nexcess Managed Wordpress platform configures Wordpress Core updates by default and the vast majority of websites have been updated. Nexcess System Engineers proactively attempted to update affected websites that were not already on the patched version. In some cases this was not possible to do. The Nexcess Managed Wordpress Development team has pushed a must-use plugin that mitigates this vulnerability where the application is not on a patched version. All customers are strongly encouraged to ensure their websites have been updated to the latest version of Wordpress.
Jul 20, 16:36 EDT
Identified - Our teams continue to work diligently to assess the impact of the recently disclosed WordPress Core vulnerabilities and verify that appropriate mitigation measures are in place. We remain actively engaged in our investigation and are monitoring the situation for any new developments.

We will continue to closely monitor the situation and take any additional steps necessary to maintain system security and stability. If you need assistance or have any concerns, please contact our Support team.
Jul 18, 19:17 EDT
Investigating - On July 17th Wordpress.org announced two critical remote code execution (RCE) vulnerabilities commonly known as WP2Shell. These vulnerabilities exist in Wordpress Core and allow an unauthenticated request to execute arbitrary code on the target website.

Customers running the Wordpress versions below are strongly advised to upgrade to latest version shown as soon as possible:

Wordpress 6.8.x; fixed in 6.8.6
WordPress 6.9.x; fixed in 6.9.5
WordPress 7.0.x; fixed in 7.0.2
WordPress 7.1 beta, fixed in 7.1 beta2

Source: https://wordpress.org/news/2026/07/wordpress-7-0-2-release/
Jul 17, 21:44 EDT
Jul 22, 2026

No incidents reported.

Jul 21, 2026

No incidents reported.

Jul 20, 2026
Jul 19, 2026

No incidents reported.

Jul 18, 2026
Jul 17, 2026
Jul 16, 2026

No incidents reported.

Jul 15, 2026
Scheduled Maintenance - Subset of Cloudhosts on NL-West-1 Data Center
Completed - The scheduled maintenance has been completed.
Jul 15, 18:30 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jul 15, 16:30 EDT
Scheduled - Nexcess Systems Engineers will be performing scheduled maintenance on the underlying hardware supporting several cloudhosts in the NL-West-1 Data Center to improve performance and stability.

Websites hosted on the cloudhosts may experience a temporary service interruption of up to 30 minutes during the maintenance window. Ticket notifications will be opened for affected clients.

You can subscribe to receive further updates regarding this maintenance above.

Our teams will keep the service interruption as brief as possible, and the support team is on hand should you need any assistance or have any questions or concerns. You can reach us through the following channels:

Live Chat via the Customer Portal: https://sites-portal.nexcess.com
Email: support@nexcess.net

We appreciate your understanding and patience as we work to enhance our service.

System Maintenance Reference: [CC-13600]
Jul 10, 14:59 EDT
Scheduled Maintenance - Subset of Cloudhosts on US-Midwest-1 & US-west-1 regions
Completed - The scheduled maintenance has been completed.
Jul 15, 06:30 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jul 15, 04:30 EDT
Scheduled - Nexcess Systems Engineers will be performing scheduled maintenance on the underlying hardware supporting several cloudhosts in the US-Midwest-1 & US-west-1 regions to improve performance and stability.

Websites hosted on the cloudhosts may experience a temporary service interruption of up to 30 minutes during the maintenance window. Ticket notifications will be opened for affected clients.

You can subscribe to receive further updates regarding this maintenance above.

Our teams will keep the service interruption as brief as possible, and the support team is on hand should you need any assistance or have any questions or concerns. You can reach us through the following channels:

Live Chat via the Customer Portal: https://sites-portal.nexcess.com
Email: support@nexcess.net

We appreciate your understanding and patience as we work to enhance our service.

System Maintenance Reference: [CC-13600]
Jul 10, 13:53 EDT
Jul 14, 2026

No incidents reported.

← Incident History Powered by Atlassian Statuspage