Hetzner incident

PHP security issues CVE-2026-109618 and CVE-2026-109619

Hetzner is currently experiencing a minor incident, which began 12h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 11:04 AM UTC
Resolved
Ongoing
Duration
● 12h 13m
Detected by Pingoru
Oct 21, 2026, 11:04 AM UTC

Update timeline

  1. investigating Oct 21, 2026, 01:47 PM UTC

    The PHP versions we use are affected by the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619. We will, of course, apply patches as soon as they become available. We are checking whether we can deploy mitigations in the meantime.