Archive for 2026

This weblog brings you news on Greenhost and recent developments in the areas of sustainability, privacy, web hosting, Internet and anything else we think is relevant.

Page 1 of 1

VPS vulnerabilities and responsibilities

Over the past weeks multiple vulnerabilities were published that can affect VPS users on our platform. These recent vulnerabilities (Copy Fail, Dirty Frag and Fragnesia) were all so-called privilege escalation bugs, where people who already had some type of access could expand that beyond their intended rights. All of these vulnerabilities are now patched in the newest kernels.

We are writing this blogpost to provide a bit of background on such vulnerabilities, and the responsibilities involved.

The current fix

The vulnerability existed in the kernel of Linux. We patched these kernels as...

Customer Data Breach

On 27 April 2026, Greenhost identified and resolved a security vulnerability that exposed limited customer data to unauthorized access. 59 customers in total were affected. This post is the public record of what happened, what was exposed, and what comes next.

Greenhost has written openly when things go wrong, like when we had major outages in 2018 and 2021. We are writing this post because transparency is nice at comfortable times, but especially important in the uncomfortable moments.

Here is what happened

A hidden API endpoint, intended only for Greenhost staff, was deployed in 2023 with...