We’re busy with mitigations and emergency upgrades to resolve yet another high severity security problem, this time, it’s TCP handling in the Linux kernel.  This originally wasn’t believed to be as severe as a problem but at least one security researcher has been able to find a remote exploit path using MPTCP and while none of our system provide or us MPTCP, we’re treating this as a critical problem and have begun rolling out kernels to all affected systems and performing mid day reboots.  While the majority of our public facing services are redundant and high availability you may notice brief intermittent issues reaching some services, including email, while these reboots are underway.  For more information, see https://nvd.nist.gov/vuln/detail/cve-2026-98432

-Kelsey and the entire System Operations Team.

Out of an abundance of caution we are selectively shutting down all of our public web sites in response to a severe PHP RCE that was going to be disclosed tomorrow morning.  Unfortunately, it looks like there are already functional proof-of-concept exploits for the two problems in the wild.  This includes webmail, forums, membertools, sonic.com, as well as ancillary other services, including sonicstatus.com.  We will work on restoring all of these services as quickly as possible once this fixes become available tomorrow or we are confident that we’re able to use local mitigations to close the exploit paths.

For more information, see https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

-Kelsey, and the rest of the Sonic System Department

Update Wed Oct 21 09:46:46 PDT 2026: PHP released their fixed versions this morning and we’ve been working on rolling out the updates as quickly as possible to restore all affected services. We expect that all disabled systems except for members.sonic.net to be back online in the next hour. -Kelsey

Update Wed Oct 21 10:42:42 PDT 2026: All disabled systems except for members.sonic.net are back online, members.sonic.net relies on a version of php which has not been patched yet.  -Kelsey

Update Wed Oct 21 12:15:02 PDT 2026: All disabled systems except for members.sonic.net are back online for real this time, webmail had been fixed but the static maintenance page was accidentally left in place.  -Kelsey

Update Wed Oct 21 18:12:02 PDT 2026:  members.sonic.net has been returned to service and all remediation work for external resources has been completed.  -Kelsey, and the rest of the Systems and Programming.

We will be performing maintenance on our call data records system Friday, August 28th at 2pm Pacific. This is expected to take 2–4 hours. During this period, the voice usage tool in Sonic Member Tools (used to view voice calls) will be unavailable.

Our email-based support system is currently experiencing issues, and we’re working to fix it. We expect this to be resolved within a few hours.

If you’ve sent a support request to support@sonic.net in the last few hours, please be aware that responses may be delayed, or your email may not have gone through correctly. We’ll do our best to recover and respond to all affected requests, but if you’re concerned yours may have been affected, please resend it once we’ve confirmed here that the issue is resolved.

Update: Email based support is now functioning again.

Sonic will be retiring all domain based web hosting services on January 15, 2027.

This decision was made after careful consideration and is based on long standing changes in the web hosting market and Sonic’s continued narrowed focus on expanding our fiber optic network.  All affected customers have been notified and will continue to be receive warnings as the final date approaches.  We encourage customers to migrate any hosting services to a new provider quickly rather than running out the clock and waiting until the last minute.  And, if you’re not actually using the hosting service in the first place, we encourage you to log into the member tools and turn it of now.  If you have any questions, please don’t hesitate to contact support or post in the forums.

Sincerely, Eli, Kelsey, and the entire Sonic Team

An update this morning for https://webmail.sonic.net introduced a bug which caused some users to not be able to login to their webmail from ~5:45am to 8am.  This bug was only reproducible on some clients.

After investigating the cause, an update for tomorrow morning (July 7th, 2026) is planned for reproducing and fixing the root cause.

– The Sonic Systems team

Sonic Technical Support will close early at 5 PM on Saturday, July 4th. We will return to our regular 6 AM to 10 PM PT operating hours on Sunday, July 5th.

Our Network Operations team will remain available for our enterprise, dedicated circuit, and colocated customers.

The Billing and Consumer Sales teams will be closed on Saturday, July 4th for the holiday. Consumer sales will return to normal operating hours on Sunday, July 5th and Billing will reopen on Monday, July 6th.

Update: Work is complete as of 6/23/26

Over the next day or so, Sonic Operations will be updating the OS for mirrors.sonic.net in place. This will result in periodic outages as services (and the server itself) will need to be restarted.

An update will be posted here once work is complete.

UPDATE: We have restored OpenVPN service as of 3:00pm PST. Please contact our Support team if you are still experiencing trouble with our VPN service.

Starting approximately 1:00pm PST, our Operations team was alerted to new connections to our VPN service failing. We are currently investigating the cause and working on a solution. We will post an update once the service is back to normal.

— Joe M
Sonic System Operations

Update 6/11 2:32am: This maintenance is now complete.

On June 10th, starting at 11:59pm, we will be performing maintenance on equipment serving the edge of the Sonic network. Customers may experience moments of routing instability, however, no connectivity interruption is expected. This maintenance window is 4 hours.

– Network Engineering