PHP Security Update Across Managed Hosting Plans

Incident Report for Hostinger

Update

We have completed update work in our Agency Hosting infrastructure and continue working to finish PHP upgrades to remaining managed hosting servers.

We'll provide further updates on progress. Thank you for your patience.
Posted Oct 21, 2026 - 19:12 UTC

Identified

Our team is aware about ongoing PHP security vulnerabilities CVE-2026-109618 and CVE-2026-109619 (php2shell).

After conducting tests in our hosting environments, we have confirmed out platform is not vulnerable php2shell. We additionally implemented an extra layer of protection to ensure attack vectors cannot be accessed.

Although our environments are not affected, we will be rolling out patched PHP versions across our infrastructure.

No actions are required from client side. We'll provide further updates soon. Thank you for your patience.
Posted Oct 21, 2026 - 17:44 UTC