Namecheap incident
PHP Security Vulnerability affecting Hosting Services | October 21, 2026
Namecheap is currently experiencing a major incident affecting Hosting and VPS and 1 more component, which began 6h ago. The vendor's full update timeline is below.
Affected components
Update timeline
- identified Oct 21, 2026, 01:31 PM UTC
Dear customers, Please note that two PHP security vulnerabilities, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), have recently been disclosed. You may find more information about the vulnerability at https://www.php.net/archive/2026.php#2026-10-20-1 Affected Services: Websites and applications running PHP (all versions) on all platforms. Current Status: In the meantime, customers are advised to keep their CMS, themes, plugins, … Continue reading [ONGOING] PHP Security Vulnerability affecting Hosting Services | October 21, 2026 → The post [ONGOING] PHP Security Vulnerability affecting Hosting Services | October 21, 2026 appeared first on Namecheap Status.