🚧 Server Maintenance in Progress



[Update 17 – 25 May 2026 | 6:00 AM GMT]

Websites are automatically brought online is phased manner after thourough deep scans and checks which is time taking process. On average its taking 30 minutes to 3 hours per website. while more than 65% websites are online still the process is very slow, also due to extensive client activity.
For clients who want their websites sooner can contact us on support@bigance.com or message us on our whatsapp by sharing their local backups/files from their website developer through online file sharing websites or google drive links thus reducing downtime and we would make their websites live manually on secondary revamped new servers till primary servers data files deep scanning and sanitisation is completed.
Websites are already online for clients who have managed wordpress and vault backups add-ons with us.

For clients associated with us for more than 7 years who wants a temporary website can contact us so we can build one for free till server completes processing their website.

For clients who wants AI website with all pages except blogs, plugins can contact us to build it for USD 500. Which is Vulnerability proof, daily backup and opens in seconds.

For clients who wants full fledge wordpress website with all pages with blogs and premium plugins can contact us to build it for USD 300 with vault monthly offline backup add-on for 1 year

We are performing essential maintenance and security upgrades to enhance system stability and protect against emerging AI threats like Mythos AI as per Government Advisory.

Further as per following advisory
cPanel (CVE-2026-41940)(CVSS score: 9.8)
(https://nvd.nist.gov/vuln/detail/CVE-2026-41940) and
CloudLinux systems (CVE-2026-31431)(CVSS score: 7.8)
(https://www.microsoft.com/en-us/security/blog/2026/05/01/cve-2026-31431-copy-fail-vulnerability-enables-linux-root-privilege-escalation/).

Wordpress, Joomla, apache, softaculous apps, mysql based websites will be effected by it.

React, Next.js, Vue.js, Svelte, AMP, WAF, Nuxt based websites will not be effected by this.
Premium eMail, managed wordpress and 3rd party client end email services will not be distrupted by this process.

As cPanel Inc which is existing since 1997 is getting severe Ai based vulnerabilities thus we are deploying latest servers with DirectAdmin Panels with better features and offers. Clients will have option to choose cPanel or DirectAdmin Panel going forward while cPanels will cost more in long run.

As per article on shared vulnerabilities. The issue comes from cookies of effected regular client user system which do not have proper security. Thus we would recommend all clients with admin access to update their devices security with appropriate tools like firewal, activirus, malware protection system. The time line of vulnerabilities shows its an client-side cookie injection issue rather than server one.

cPanel released patches for three additional vulnerabilities in one update:
de CVE-2026-29201: Arbitrary file read in the LOADFEATUREFILE adminbin call.
CVE-2026-29202(CVSS score: 8.8) : Perl code injection in the create_user API call.
CVE-2026-29203(CVSS score: 8.8) : Unsafe symlink handling allowing chmod on arbitrary files

These rare and critical vulnerabilities have been listed in CISA catalog too. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Patching servers with New Updates.

WHM/cPanel/webmail, remains disabled for now for security reasons. cPanel remains turned off till we complete taking a full backup to prevent any future AI vulnerabilities.


⏳ Expected Downtime: As per updates
🔒 Security Enhancements in Progress