Hostinger incident

PHP Security Update Across Managed Hosting Plans

Ongoing since 05:44 PM UTC.

identified Oct 21, 2026, 07:12 PM UTC

We have completed update work in our Agency Hosting infrastructure and continue working to finish PHP upgrades to remaining managed hosting servers. We'll provide further updates on progress. Thank you for your patience.

Started
Oct 21, 2026, 05:44 PM UTC
Resolved
Ongoing
Duration
● 21h 37m
Detected by Pingoru
Oct 21, 2026, 05:44 PM UTC

Update timeline

  1. identified Oct 21, 2026, 05:44 PM UTC

    Our team is aware about ongoing PHP security vulnerabilities CVE-2026-109618 and CVE-2026-109619 (php2shell). After conducting tests in our hosting environments, we have confirmed out platform is not vulnerable php2shell. We additionally implemented an extra layer of protection to ensure attack vectors cannot be accessed. Although our environments are not affected, we will be rolling out patched PHP versions across our infrastructure. No actions are required from client side. We'll provide further updates soon. Thank you for your patience.

  2. identified Oct 21, 2026, 07:12 PM UTC

    We have completed update work in our Agency Hosting infrastructure and continue working to finish PHP upgrades to remaining managed hosting servers. We'll provide further updates on progress. Thank you for your patience.

Your product runs on more than Hostinger

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →