Update: Restoration at is at 100.00%

The restoration was completed at around 11:30PM. We're working with customers who may need access to their platform to fix any accessibility issues.

The new host for the restored accounts is das125.truehost.cloud with IP 102.212.247.115

In case of any issues, feel free to reach out to us via Call, WhatsApp, Livechat or Email.

Update: Restoration at is at 78.56%

The restoration is on going. Currently, 78.56% of accounts have been restored successfully.

Restore is expected to end soon. Most accounts are now active

Update: Restoration at is at 46.44%

The restoration is on going. Currently, 46.44% of accounts have been restored successfully.

We will continue to provide updates as we go.

Update: Restoration at is at 30.54%

The restoration is on going. Currently, 30.54% of accounts have been restored successfully. Accounts that are active have been notified.

Restoration in progress

Following our investigation into the CVE-2026-41940 security incident, our team has completed the forensic review of the affected server and has begun restoring verified clean backups to a brand new, fully patched and hardened server. No files affected by this CVE are being carried forward, only verified clean backup data is being restored.

We expect the restoration to be fully complete within 24–36 hours from the time of this update. We will notify you once your services are confirmed back online.

Please be aware that because your hosting account is being migrated to a new server, your hosting IP address will change. If your DNS is managed through us, this will be handled automatically. However, if you manage your own DNS records through an external provider, such as Cloudflare, Vercel, or any other third-party DNS service — you will need to manually update your A records to the new IP address from within your DNS management portal. We will contact you individually with your new IP address once the restoration is completed. For quick status update of an individual accounts' restoration, please don't hesitate to reach out via support@truehost.cloud

If you are unsure whether this applies to you or need help updating your records, please open a support ticket and our team will assist you directly. We appreciate your continued patience.

Truehost Team

Security Incident – Server Taken Offline

We are writing to inform you of a serious security incident affecting server rbx108.treushot.cloud. This server has been taken offline as an immediate precautionary measure following the public disclosure of CVE-2026-41940, a critical zero-day vulnerability in cPanel & WHM.

This vulnerability, rated 9.8 out of 10.0 in severity, allows unauthenticated attackers to bypass authentication and gain full administrative access to affected hosting servers. It impacts all versions of cPanel & WHM after v11.40 and has been confirmed as actively exploited in the wild.

What Happened?

On April 28, 2026, cPanel released an emergency security patch for CVE-2026-41940 after it was discovered that the vulnerability had already been exploited by malicious actors across the internet. Out of an abundance of caution and to protect your data, we immediately took rbx108.treushot.cloud offline upon detection to prevent any further unauthorized access and to begin a thorough investigation.

Impact

All services on rbx108.treushot.cloud are currently offline. Clients hosted on this server are unable to access:

• Websites and web applications

• Email accounts

• Databases

• Files and FTP access

• cPanel control panel

We understand how disruptive this is and sincerely apologize for the inconvenience.

Our team is actively working around the clock to:

1. Investigate the extent of the incident on this server
2. Patch and harden the server environment against CVE-2026-41940
3. Restore client data and services from backups
4. Verify the integrity of all restored data before bringing services back online

Estimated Resolution

We expect the restoration process to be completed within 24–48 hours from the time of this notice. We will post updates here as work progresses and will notify affected clients directly once services are restored.

Need Help?

If you have urgent questions or concerns, please contact our support team via support@truehost.cloud. We are prioritising responses for clients affected by this incident.

We take the security and integrity of your data extremely seriously. Thank you for your patience as we work to resolve this as quickly and safely as possible.

— The Truehost Infrastructure Team