{
  "generated_at": "2026-08-07T23:41:09.090051259+02:00",
  "notice": {
    "any": false,
    "text": "",
    "updated_at": "0001-01-01T00:00:00Z"
  },
  "vpsadmin": {
    "api": {
      "label": "https://api.vpsfree.cz",
      "description": "",
      "url": "https://api.vpsfree.cz",
      "status": "operational"
    },
    "console": {
      "label": "Console Router",
      "description": "",
      "url": "https://console.vpsfree.cz/vzconsole.js",
      "status": "operational"
    },
    "webui": {
      "label": "https://vpsadmin.vpsfree.cz",
      "description": "",
      "url": "https://vpsadmin.vpsfree.cz",
      "status": "operational"
    }
  },
  "outage_reports": {
    "status": true,
    "announced": [],
    "recent": [
      {
        "id": 1431,
        "begins_at": "2026-08-07T18:11:00Z",
        "duration": 30,
        "type": "unplanned_outage",
        "state": "resolved",
        "impact": "system_reset",
        "cs_summary": "Nacteni livepatche se nepovedlo",
        "cs_description": "Jadro se zaseklo pri nacitani livepatche, zadny stack trace nevyrazilo. Test stagingem prosel v poradku, hledame pricinu, proc to produkcni noda neprezila.",
        "en_summary": "Livepatch load gone wrong",
        "en_description": "Kernel got stuck without any stack trace while loading livepatch. Test on staging went without any problems, so we're now looking for why a production node didn't survive it.",
        "entities": [
          {
            "name": "Node",
            "entity_type": "node",
            "id": 214,
            "label": "node5.brq"
          }
        ]
      }
    ]
  },
  "security_advisories": {
    "status": true,
    "recent": [
      {
        "id": 10,
        "published_at": "2026-07-21T20:00:00Z",
        "updated_at": "2026-07-21T20:46:08Z",
        "state": "published",
        "cves": [
          {
            "id": 11,
            "cve_id": "CVE-2026-53362",
            "url": "https://www.cve.org/CVERecord?id=CVE-2026-53362"
          }
        ],
        "name": "IPv6 MSG_SPLICE_PAGES overflow",
        "en_summary": "Local privilege escalation",
        "en_description": "An ordinary VPS process can use a crafted UDPv6 send to overwrite adjacent networking metadata in the shared kernel; no packet from outside the VPS is required. If the overwrite can be exploited reliably, it could give the attacker root inside the affected VPS, meaning full control of that VPS. No root on the node or access to another VPS has been demonstrated. Failed attempts may crash or fault the shared kernel and affect node availability.",
        "en_response": "The fix is included in Linux 6.12.95 and later. vpsAdminOS protections that overwrite released kernel memory make reuse-after-release bugs harder, but they do not directly stop this flaw because it writes past the end of memory that is still in use. The status below shows the result and any affected interval for each node.",
        "affected_node_count": 12
      },
      {
        "id": 9,
        "published_at": "2026-07-21T20:00:00Z",
        "updated_at": "2026-07-21T20:45:58Z",
        "state": "published",
        "cves": [
          {
            "id": 10,
            "cve_id": "CVE-2026-53359",
            "url": "https://www.cve.org/CVERecord?id=CVE-2026-53359"
          }
        ],
        "name": "KVM shadow paging UAF",
        "en_summary": "Local privilege escalation",
        "en_description": "vpsAdmin normally allows VPSes to use the KVM device, so a process that can open /dev/kvm can reach the shadow-paging use-after-free in the VM memory-management path. If the memory corruption can be turned into privilege escalation, the user-facing impact is root inside the affected VPS, meaning full control of that VPS. The available research demonstrates the kernel bug, but not a working privilege escalation, root on the node, or access to another VPS. A failed attempt can fault the shared kernel and affect node availability. Kernel warnings that may indicate this bug was triggered are monitored.",
        "en_response": "The fix is included in Linux 6.12.95 and later. vpsAdminOS overwrites newly allocated and released kernel memory and randomizes internal allocation behavior. This makes reliable reuse of released memory harder, but it does not remove the bug. The status below shows the result and any affected interval for each node.",
        "affected_node_count": 12
      },
      {
        "id": 8,
        "published_at": "2026-07-21T20:00:00Z",
        "updated_at": "2026-07-21T20:45:47Z",
        "state": "published",
        "cves": [
          {
            "id": 9,
            "cve_id": "CVE-2026-46242",
            "url": "https://www.cve.org/CVERecord?id=CVE-2026-46242"
          }
        ],
        "name": "Bad epoll",
        "en_summary": "Local privilege escalation",
        "en_description": "Ordinary VPS processes can trigger the vulnerable epoll race without special privileges. If the resulting shared-kernel memory corruption can be exploited reliably, it could give the attacker root inside the affected VPS, meaning full control of that VPS. No root on the node or access to another VPS has been demonstrated. Failed attempts may cause null-pointer, general-protection, or related shared-kernel faults and affect node availability. Kernel warnings that may indicate this bug was triggered are monitored.",
        "en_response": "The fix is included in Linux 6.12.95 and later. vpsAdminOS overwrites newly allocated and released kernel memory, randomizes internal allocation behavior, and keeps some object types apart. These measures make reliable reuse of released memory substantially harder, but they do not remove the bug. The status below shows the result and any affected interval for each node.",
        "affected_node_count": 12
      },
      {
        "id": 7,
        "published_at": "2026-07-21T20:00:00Z",
        "updated_at": "2026-07-21T20:45:39Z",
        "state": "published",
        "cves": [
          {
            "id": 8,
            "cve_id": "CVE-2026-43499",
            "url": "https://www.cve.org/CVERecord?id=CVE-2026-43499"
          }
        ],
        "name": "GhostLock",
        "en_summary": "Local privilege escalation",
        "en_description": "The issue known as GhostLock is reachable through futex operations available to ordinary VPS processes. The published exploit achieved host root from an unprivileged process inside a container on Google's Linux 6.12.80 kernelCTF target. It was not tested on vpsAdminOS. Host root on a vpsAdminOS node could expose other VPSes, but the researchers did not test that cross-container step. Failed attempts may fault or hang the shared kernel. Kernel warnings that may indicate this bug was triggered are monitored.",
        "en_response": "The fix is included in Linux 6.12.86 and later. The flaw affects kernel-stack state, so vpsAdminOS heap-allocation hardening does not prevent it. No runtime mitigation replaces the kernel fix. The status below shows the result and any affected interval for each node.",
        "affected_node_count": 12
      },
      {
        "id": 6,
        "published_at": "2026-07-21T20:00:00Z",
        "updated_at": "2026-07-21T20:45:31Z",
        "state": "published",
        "cves": [
          {
            "id": 7,
            "cve_id": "CVE-2026-23111",
            "url": "https://www.cve.org/CVERecord?id=CVE-2026-23111"
          }
        ],
        "name": "nf_tables catchall verdict UAF",
        "en_summary": "Local privilege escalation",
        "en_description": "The vulnerable nf_tables operation is available to ordinary VPS processes and can corrupt shared kernel state. Reliable exploitation could give the attacker root inside the affected VPS, meaning full control of that VPS. No escape to root on the node or access to another VPS has been demonstrated. Failed attempts can fault the shared kernel and affect node availability. Kernel warnings that may indicate this bug was triggered are monitored.",
        "en_response": "The fix is included in Linux 6.12.70 and later. vpsAdminOS overwrites newly allocated and released kernel memory, randomizes internal allocation behavior, and keeps some object types apart. This makes reliable reuse of released memory harder, but it does not remove the bug. The status below shows the result and any affected interval for each node.",
        "affected_node_count": 10
      }
    ]
  },
  "locations": [
    {
      "id": 3,
      "label": "Praha",
      "nodes": [
        {
          "id": 120,
          "name": "node19.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 121,
          "name": "node20.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 122,
          "name": "node21.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 123,
          "name": "node22.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 124,
          "name": "node23.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 125,
          "name": "node24.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 126,
          "name": "node25.prg",
          "location_id": 3,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 161,
          "name": "backuper2.prg",
          "location_id": 6,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 300,
          "name": "node1.pgnd",
          "location_id": 5,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 400,
          "name": "node1.stg",
          "location_id": 7,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 401,
          "name": "node2.stg",
          "location_id": 7,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        }
      ],
      "dns_resolvers": [
        {
          "name": "ns1.prg.vpsfree.cz",
          "ping": "responding",
          "lookup": true
        },
        {
          "name": "ns2.prg.vpsfree.cz",
          "ping": "responding",
          "lookup": true
        }
      ]
    },
    {
      "id": 4,
      "label": "Brno",
      "nodes": [
        {
          "id": 214,
          "name": "node5.brq",
          "location_id": 4,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        },
        {
          "id": 215,
          "name": "node6.brq",
          "location_id": 4,
          "os_type": "vpsadminos",
          "vpsadmin": true,
          "ping": "responding",
          "maintenance": false,
          "pool_state": "online",
          "pool_scan": "none",
          "pool_scan_percent": 0,
          "pool_status": true
        }
      ],
      "dns_resolvers": [
        {
          "name": "ns1.brq.vpsfree.cz",
          "ping": "responding",
          "lookup": true
        },
        {
          "name": "ns2.brq.vpsfree.cz",
          "ping": "responding",
          "lookup": true
        }
      ]
    }
  ],
  "web_services": [
    {
      "label": "vpsfree.cz",
      "description": "Website in Czech",
      "url": "https://vpsfree.cz",
      "status": "operational"
    },
    {
      "label": "vpsfree.org",
      "description": "Website in English",
      "url": "https://vpsfree.org",
      "status": "operational"
    },
    {
      "label": "kb.vpsfree.cz",
      "description": "Knowledge Base in Czech",
      "url": "https://kb.vpsfree.cz",
      "status": "operational"
    },
    {
      "label": "kb.vpsfree.org",
      "description": "Knowledge Base in English",
      "url": "https://kb.vpsfree.org",
      "status": "operational"
    },
    {
      "label": "discourse.vpsfree.cz",
      "description": "Discussion forum",
      "url": "https://discourse.vpsfree.cz",
      "status": "operational"
    },
    {
      "label": "ZNC",
      "description": "IRC bouncer",
      "url": "https://im.vpsfree.cz/znc/",
      "status": "operational"
    }
  ],
  "nameservers": [
    {
      "name": "ns1.vpsfree.cz",
      "ping": "responding",
      "lookup": true
    },
    {
      "name": "ns2.vpsfree.cz",
      "ping": "responding",
      "lookup": true
    },
    {
      "name": "ns3.vpsfree.cz",
      "ping": "responding",
      "lookup": true
    },
    {
      "name": "ns4.vpsfree.cz",
      "ping": "responding",
      "lookup": true
    }
  ]
}