The MySAU Customer Portal is back online and fully operational.
The required PHP security updates have been applied, and customer access has been restored.
We thank our customers for their patience and understanding while we took the necessary precautions to protect our systems and customer information.
Posted Oct 22, 2026 - 05:58 AEDT
Update
Our team is actively monitoring the release of security updates addressing the recently disclosed critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
We are tracking vendor updates, including those from cPanel, CloudLinux and Ubuntu, to ensure security patches are applied as they become available.
=== MySAU Customer Portal ===
Our Development Team is working on the MySAU Customer Portal, applying the required security updates and validating the environment before restoring customer access.
The portal will remain offline until we are satisfied that it can be safely brought back online.
Further updates regarding the MySAU Customer Portal will be provided by our Development Team as work progresses.
=== cPanel Security Updates ===
cPanel has released security updates for PHP versions running on servers that are not using CloudLinux OS.
All cPanel servers covered by a Servers Australia Monitoring and Maintenance Agreement (MMA) that are not running CloudLinux OS have now had the following updates applied:
PHP 8.2, 8.3, 8.4 and 8.5: Security updates applied.
PHP 7.4, 8.0 and 8.1: Backported security patches applied.
Customers running PHP 7.2 or earlier are strongly encouraged to upgrade their websites and applications to newer, supported PHP versions and uninstall the older versions once compatibility has been confirmed.
=== CloudLinux and Ubuntu Updates ===
Additional security updates from CloudLinux and Ubuntu are being released progressively.
Our team will review and deploy applicable patches to managed servers as they become available, ensuring the updates are appropriate for the operating systems and PHP versions in use.
Posted Oct 22, 2026 - 03:42 AEDT
Update
Security patches addressing the recently disclosed critical PHP vulnerabilities are now available from PHP (https://www.php.net/).
Our team is currently working to apply the required updates to the MySAU Customer Portal and validate that the vulnerabilities have been addressed before restoring customer access.
MySAU will remain offline while this work is completed to ensure the portal can be safely brought back online.
We strongly recommend that customers who are able to manually update their PHP installations do so as soon as possible, ensuring they apply the appropriate security updates for their PHP version and operating system.
Customers should also monitor security advisories from their operating system, control panel and application vendors for any additional updates or recommended actions.
We will provide a further update once patching and validation of the MySAU Customer Portal have been completed.
Posted Oct 22, 2026 - 00:55 AEDT
Identified
Servers Australia will be taking the MySAU Customer Portal offline, effective immediately, as a precautionary measure following the disclosure of two critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
At this stage, we have identified no evidence of compromise. This is a proactive security measure to minimise potential exposure while official security patches are released and validated.
We expect MySAU to be restored before 9:00 AM AEDT on Thursday, 22 October 2026, provided suitable security patches are available. If necessary, the outage will be extended until we are satisfied the portal can be safely restored.
Customer hosting services, servers and network infrastructure are not affected by this maintenance.
While MySAU is unavailable, customers will be unable to raise or view support cases, manage services, access IPMI functionality or view invoices.
Our Support Team remains available 24/7 on 1300 788 862. We ask customers to limit calls to urgent and critical issues during this period.
An email notification has been sent to all primary account owners, providing further information about the vulnerabilities, the precautionary measures being taken by Servers Australia, and recommendations for customers to review their own environments.
Further updates regarding the MySAU Customer Portal will be provided here as information becomes available.
Posted Oct 21, 2026 - 18:45 AEDT
Investigating
Servers Australia will be taking the MySAU Customer Portal offline, effective immediately, as a precautionary measure following the disclosure of two critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
At this stage, we have identified no evidence of compromise. This is a proactive security measure to minimise potential exposure while official security patches are released and validated.
We expect MySAU to be restored before 9:00 AM AEDT on Thursday, 22 October 2026, provided suitable security patches are available. If necessary, the outage will be extended until we are satisfied the portal can be safely restored.
Customer hosting services, servers and network infrastructure are not affected by this maintenance.
While MySAU is unavailable, customers will be unable to raise or view support cases, manage services, access IPMI functionality or view invoices.
Our Support Team remains available 24/7 on 1300 788 862. We ask customers to limit calls to urgent and critical issues during this period.
An email notification has been sent to all primary account owners, providing further information about the vulnerabilities, the precautionary measures being taken by Servers Australia, and recommendations for customers to review their own environments.
Further updates regarding the MySAU Customer Portal will be provided here as information becomes available.
Posted Oct 21, 2026 - 18:45 AEDT
This incident affected: Service Desk (MySAU Customer Portal).