How do I check whether I am affected by CMP-202610-dreamhost-forces-email-and-ftp-sftp-password-resets-in-an-un?

- Check whether any domain, website, mailbox or FTP/SFTP account you run is hosted on DreamHost. - Review every DreamHost mailbox for forwarding rules or destinations you do not recognise. - Check whether DreamHost email/FTP passwords were reused elsewhere.

Live › campaign › CMP-202610-dreamhost-forces-email-and-ftp-sftp-password-resets-in-an-un

Go to dashboard

medium⚡ Early warning · no CVE yetInfrastructure

DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident

Q: What is the fix for CMP-202610-dreamhost-forces-email-and-ftp-sftp-password-resets-in-an-un?

- Complete the DreamHost password resets for all mailbox and FTP/SFTP users and tell users out of band (DreamHost cannot contact them directly). - Remove unknown forwarding rules. - Change any reused passwords on other services. - Review site files reachable via FTP/SFTP for unexpected changes (no indicators published).

Since 2026-10-23 DreamHost has had an incident that started as File Manager connectivity problems and spread to other services. It blocked logins for email and FTP/SFTP users until account owners set new passwords, and told customers to check every mailbox for unknown forwarding rules, which suggests some mailboxes may have been accessed. DreamHost has not said what happened, how many accounts are affected, or whether files or messages were exposed. Teams hosting sites, mail or FTP on DreamHost are at risk. Cause and attacker are unknown; the incident was still active on 2026-10-26.

Summary written from the sources below. Check the originals before acting.

Known so far

4/6

medium

no CVSS yet; severity from the sources

known so far4 of 6

missing: primary source, exploitation

First public: Oct 23, 2026 UTC
Last modified: Oct 26, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-26 21:02 UTC. All times on this page are UTC.

Who is affected

1 product

Product	Ecosystem	Affected	Fixed in
DreamHost	vendor	email and FTP/SFTP accounts	–

Who cares: campaign, early-warning
Not affected if: –

How to check

Check whether any domain, website, mailbox or FTP/SFTP account you run is hosted on DreamHost.
Review every DreamHost mailbox for forwarding rules or destinations you do not recognise.
Check whether DreamHost email/FTP passwords were reused elsewhere.

The fix

Complete the DreamHost password resets for all mailbox and FTP/SFTP users and tell users out of band (DreamHost cannot contact them directly).
Remove unknown forwarding rules.
Change any reused passwords on other services.
Review site files reachable via FTP/SFTP for unexpected changes (no indicators published).

Know the next one before it finds you.

Add to Slack

DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident

Summary written from the sources below. Check the originals before acting.

Product

Ecosystem

Affected

Fixed in

DreamHost

vendor

email and FTP/SFTP accounts

–

DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident

Who is affected

How to check

The fix

Know the next one before it finds you.

DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident

Who is affected

How to check

The fix

Know the next one before it finds you.

Who had it, and when

Sources