Hetzner incident
PHP security issues CVE-2026-109618 and CVE-2026-109619
Resolved after 2 days 4 hours, on October 21, 2026.
The PHP versions we use are affected by the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619. We will, of course, apply patches as soon as they become available. We are checking whether we can deploy mitigations in the meantime.
Update timeline
- investigating Oct 21, 2026, 01:47 PM UTC
The PHP versions we use are affected by the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619. We will, of course, apply patches as soon as they become available. We are checking whether we can deploy mitigations in the meantime.
- investigating Oct 22, 2026, 04:32 AM UTC
The PHP versions we use are affected by the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619. We will, of course, apply patches as soon as they become available. We are checking whether we can deploy mitigations in the meantime.
Your product runs on more than Hetzner
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services