Hetzner incident
PHP security issues CVE-2026-109618 and CVE-2026-109619
Hetzner is currently experiencing a minor incident, which began 12h ago. The vendor's full update timeline is below.
Update timeline
- investigating Oct 21, 2026, 01:47 PM UTC
The PHP versions we use are affected by the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619. We will, of course, apply patches as soon as they become available. We are checking whether we can deploy mitigations in the meantime.