CONVOTIS Cloud / DDOS related degradation on Thursday 5th November

Dear Partners,

On 5th November at 7 p.m. we encountered alarms about packet loss towards CONVOTIS Cloud.

We contacted our carrier who confirmed that they were suffering from a DDOS attack – reaction of the own DDOS mitigation was not fast enough, this is in investigation on carrier side.

We have seen the packet loss going back to 0% around 8:30 p.m. in our monitoring.

We are following up with the carrier, meanwhile apologize for the initial notification being sent in German only.

Kind regards,
Your CONVOTIS Deutschland Managed Services Team

Scheduled Patching in November 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

To ensure our server systems remain secure, stable, and up to date, we perform regular system maintenance and patching.

Please find below the scheduled patch days for November 2026:

Internal Networking Devices (UTC+1)
  • Tuesday, November 10th – between 22:00 and 03:00(next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region APAC (UTC+8)
  • Monday, November 02nd – Development environment starting at 16:00
  • Wednesday, November 04th – QA/Stage environment starting at 22:00
  • Friday, November 06th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, November 09th –  Development environment starting at 09:00
  • Wednesday, November 11th – Test/Stage environment starting at 15:00
  • Thursday, November 12th- Production systems between 22:00 and 03:00 (next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region America (UTC-5)
  • Monday, November 16th – Development environment starting at 06:00
  • Wednesday, November 18th – QA/Stage environment starting at 09:00
  • Friday, November 20th – Production systems between 03:00 and 06:00

Please note: short service interruptions or restarts may occur during patching.

Should you have any questions or concerns, feel free to reach us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

Patch Completion Notification – All Regions – October 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

We are pleased to inform you that the scheduled patches for the EMEA, America and APAC regions have been successfully completed.

All systems are currently up and running.

However, if you encounter any issues, please do not hesitate to contact us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

******************************************

Internal Networking Devices (UTC+1)
  • Tuesday, October 13th – between 22:00 and 03:00(next day)
Region APAC (UTC+8)
  • Monday, October 05th – Development environment starting at 16:00
  • Wednesday, October 07th – QA/Stage environment starting at 22:00
  • Friday, October 09th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, October 12th –  Development environment starting at 09:00
  • Wednesday, October 14th – Test/Stage environment starting at 15:00
  • Thursday, October 15th- Production systems between 22:00 and 03:00 (next day)
Region America (UTC-5)
  • Monday, October 19th – Development environment starting at 06:00
  • Wednesday, October 21st – QA/Stage environment starting at 09:00
  • Friday, October 23rd – Production systems between 03:00 and 06:00

URGENT: Critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) – action required

Dear customer,

The PHP project has announced two critical vulnerabilities in PHP. They are tracked as CVE-2026-109618 and CVE-2026-109619 and rated CVSS 9.2. Both allow remote code execution, and an attacker does not need to log in. PHP is attacked while it reads the incoming request, before any application code runs, so application-level protections do not help. Details leaked before disclosure.

Some security researchers report attacks are already happening; others have not seen any yet. The fixed releases are scheduled for 21 October 2026, 14:00 UTC. According to reports, every version from PHP 5.4 onward is affected. Official fixes are only provided for PHP 8.2 and later.

What we ask you to do (if you run PHP):

  1. Update PHP immediately once the fixed releases are out, on every system that runs PHP.
  2. Rebuild and redeploy all container images that include PHP. This covers official php:* images, images based on them, and any image that installs PHP. A running container stays vulnerable until it is rebuilt from a patched base image and redeployed. Patching the host does not fix it.
  3. Plan an upgrade for PHP 8.1 and older. These versions will not get an official fix.
  4. If you use the Remi repository (rpms.remirepo.net): Remi has said it will not publish updates on 21 October. Switch to your distribution’s packages or contact us.
  5. If you cannot patch right away: temporary measures include blocking multipart/form-data requests at the web server (this breaks file uploads), a WAF with current rules, or taking the affected sites offline. These are stopgaps only.

We are checking the systems we manage and will patch them. Please tell us about any systems or images you maintain yourself.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

Scheduled Patching in October 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

To ensure our server systems remain secure, stable, and up to date, we perform regular system maintenance and patching.

Please find below the scheduled patch days for October 2026:

Internal Networking Devices (UTC+1)
  • Tuesday, October 13th – between 22:00 and 03:00(next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region APAC (UTC+8)
  • Monday, October 05th – Development environment starting at 16:00
  • Wednesday, October 07th – QA/Stage environment starting at 22:00
  • Friday, October 09th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, October 12th –  Development environment starting at 09:00
  • Wednesday, October 14th – Test/Stage environment starting at 15:00
  • Thursday, October 15th- Production systems between 22:00 and 03:00 (next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region America (UTC-5)
  • Monday, October 19th – Development environment starting at 06:00
  • Wednesday, October 21st – QA/Stage environment starting at 09:00
  • Friday, October 23rd – Production systems between 03:00 and 06:00

Please note: short service interruptions or restarts may occur during patching.

Should you have any questions or concerns, feel free to reach us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

Patch Completion Notification – All Regions – September 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

We are pleased to inform you that the scheduled patches for the EMEA, America and APAC regions have been successfully completed.

All systems are currently up and running.

However, if you encounter any issues, please do not hesitate to contact us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

*******************************************************

Internal Networking Devices (UTC+1)
  • Tuesday, September 08th – between 22:00 and 03:00(next day)
Region APAC (UTC+8)
  • Monday, September 07th – Development environment starting at 16:00
  • Wednesday, September 09th – QA/Stage environment starting at 22:00
  • Friday, September 11th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, September 14th –  Development environment starting at 09:00
  • Wednesday, September 16th – Test/Stage environment starting at 15:00
  • Thursday, September 17th- Production systems between 22:00 and 03:00 (next day)
Region America (UTC-5)
  • Monday, September 21st – Development environment starting at 06:00
  • Wednesday, September 23rd – QA/Stage environment starting at 09:00
  • Friday, September 25th – Production systems between 03:00 and 06:00

Scheduled Patching in September 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

To ensure our server systems remain secure, stable, and up to date, we perform regular system maintenance and patching.

Please find below the scheduled patch days for September 2026:

Internal Networking Devices (UTC+1)
  • Tuesday, September 08th – between 22:00 and 03:00(next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region APAC (UTC+8)
  • Monday, September 07th – Development environment starting at 16:00
  • Wednesday, September 09th – QA/Stage environment starting at 22:00
  • Friday, September 11th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, September 14th –  Development environment starting at 09:00
  • Wednesday, September 16th – Test/Stage environment starting at 15:00
  • Thursday, September 17th- Production systems between 22:00 and 03:00 (next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region America (UTC-5)
  • Monday, September 21st – Development environment starting at 06:00
  • Wednesday, September 23rd – QA/Stage environment starting at 09:00
  • Friday, September 25th – Production systems between 03:00 and 06:00

Please note: short service interruptions or restarts may occur during patching.

Should you have any questions or concerns, feel free to reach us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

Patch Completion Notification – All Regions – August 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

We are pleased to inform you that the scheduled patches for the EMEA, America and APAC regions have been successfully completed.

All systems are currently up and running.

However, if you encounter any issues, please do not hesitate to contact us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

*******************************************************

Internal Networking Devices (UTC+1)
  • Tuesday, August 11th – between 22:00 and 03:00(next day)
Region APAC (UTC+8)
  • Monday, August 03rd – Development environment starting at 16:00
  • Wednesday, August 05th – QA/Stage environment starting at 22:00
  • Friday, August 07th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, August 10th –  Development environment starting at 09:00
  • Wednesday, August 12th – Test/Stage environment starting at 15:00
  • Thursday, August 13th- Production systems between 22:00 and 03:00 (next day)
Region America (UTC-5)
  • Monday, August 17th – Development environment starting at 06:00
  • Wednesday, August 19th – QA/Stage environment starting at 09:00
  • Friday, August 21st – Production systems between 03:00 and 06:00

Patch Completion Notification – All Regions – July 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

We are pleased to inform you that the scheduled patches for the EMEA, America and APAC regions have been successfully completed.

All systems are currently up and running.

However, if you encounter any issues, please do not hesitate to contact us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team

*******************************************************

Internal Networking Devices (UTC+1)
  • Tuesday, July 14th – between 22:00 and 03:00(next day)
Region APAC (UTC+8)
  • Monday, July 06th – Development environment starting at 16:00
  • Wednesday, July 08th – QA/Stage environment starting at 22:00
  • Friday, July 10th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, July 13th –  Development environment starting at 09:00
  • Wednesday, July 15th – Test/Stage environment starting at 15:00
  • Thursday, July 16th- Production systems between 22:00 and 03:00 (next day)
Region America (UTC-5)
  • Monday, July 20th – Development environment starting at 06:00
  • Wednesday, July 22nd – QA/Stage environment starting at 09:00
  • Friday, July 24th – Production systems between 03:00 and 06:00

Scheduled Patching in August 2026 – System Upgrades CONVOTIS Deutschland Managed Services

Dear customer,

To ensure our server systems remain secure, stable, and up to date, we perform regular system maintenance and patching.

Please find below the scheduled patch days for August 2026:

Internal Networking Devices (UTC+1)
  • Tuesday, August 11th – between 22:00 and 03:00(next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region APAC (UTC+8)
  • Monday, August 03rd – Development environment starting at 16:00
  • Wednesday, August 05th – QA/Stage environment starting at 22:00
  • Friday, August 07th –  Production systems between 01:00 and 05:00
Region Europe (UTC+1)
  • Monday, August 10th –  Development environment starting at 09:00
  • Wednesday, August 12th – Test/Stage environment starting at 15:00
  • Thursday, August 13th- Production systems between 22:00 and 03:00 (next day)
    • VPN access and CONVOTIS Selfservice system will be unavailable during this window.
Region America (UTC-5)
  • Monday, August 17th – Development environment starting at 06:00
  • Wednesday, August 19th – QA/Stage environment starting at 09:00
  • Friday, August 21st – Production systems between 03:00 and 06:00

Please note: short service interruptions or restarts may occur during patching.

Should you have any questions or concerns, feel free to reach us at service@cloudpowered.services.

Best regards,

Your CONVOTIS Deutschland Managed Services Team