Users of the Phusion Passenger Watchdog module, especially for Plesk and CPanel packages, are recommended to update to the latest version as soon as possible.

The vulnerability potentially allows local privilege escalation: an attacker with access to a normal, logged-in user account could gain root-level access to the server.

Both Plesk and CPanel have patched packages available.

No CVE has been assigned at time of writing. Links to original reports and recomended steps are on the Plesk Advisory and the CPanel Advisory

Anyone needing extra helpo with updates, please open a support ticket at https://rimuhosting.com/ticket/enterticketdetails.jsp

Our Dallas site is performing routine generator maintenance. No impact is expected.

Maintenance Start: 25 Aug 2026 08:00 US/Eastern
Maintenance End: 25 Aug 2026 17:00 US/Eastern

• host1062.rimuhosting.com

host1062.rimuhosting.com requires routine maintenance. To minimise customer disruption we will be moving VPSs running there to an alternate host.

Scheduled: from 10am 18th August UTC (4am Dallas)

Detail: One at a time, VPSs will be stopped, the filesystem moved to an alternate host, and then restarted on the new host. Moves will take roughly 1min/GB of disk.

• host1094.rimuhosting.com

host1094.rimuhosting.com requires routine maintenance. To minimise customer disruption we will be moving VPSs running there to an alternate host.

Scheduled: from 4am 18th August UTC (10pm Dallas)

Detail: One at a time, VPSs will be stopped, the filesystem moved to an alternate host, and then restarted on the new host. Moves will take roughly 1min/GB of disk.

• host1102.rimuhosting.com

host1102.rimuhosting.com requires routine maintenance. To minimise customer disruption we will be moving VPSs running there to an alternate host.

Scheduled: from 4am 17th August UTC (10pm Dallas)

Detail: One at a time, VPSs will be stopped, the filesystem moved to an alternate host, and then restarted on the new host. Moves will take roughly 1min/GB of disk.

• host1025.rimuhosting.com

host1025.rimuhosting.com requires routine maintenance. To minimise customer disruption we will be moving VPSs running there to an alternate host.

Scheduled: from 10am 17th August UTC (4am Dallas)

Detail: One at a time, VPSs will be stopped, the filesystem moved to an alternate host, and then restarted on the new host. Moves will take roughly 1min/GB of disk.

Our Sydney site team is completing power maintenance in the following window

Start time: 20 August 2026, 06:00 AEST
End time: 20 August 2026, 22:00 AEST

Detail: S1 Sydney will be conducting enhancement works to the electrical infrastructure. This will result in one out of the two power rails in each rack being de-energised whilst the work is carried out. Due to the high availability of our systems it will have no effect on any of our servers.

Plesk has asked all users update servers running their hosting panel, due to a signiificant security issue, designated CVE-2026-64639

These issues affect all Plesk versions prior to 18.0.79.6. If this issue is left unaddressed, a customer who can clone or copy a database on the server could end up with database server administrator privileges. We are not aware of any mitigations.

Further details and can be found at https://support.plesk.com/hc/en-us/articles/42521305418903-Vulnerability-CVE-2026-64639-Privilege-Escalation-via-Database-Cloning-in-Plesk

Where possible we have automatically updated customers plesk installations to bring them up to date.

Anyone who requires help to complete this update, please open a support ticket with us https://rimuhosting.com/ticket/enterticketdetails.jsp