Namecheap incident
PHP Security Vulnerability affecting Hosting Services | October 21, 2026
Resolved after 1 day 3 hours, affecting Hosting and VPS and 1 more, on October 21, 2026.
Dear customers, Please note that two PHP security vulnerabilities, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), have recently been disclosed. You may find more information about the vulnerability at https://www.php.net/archive/2026.php#2026-10-20-1 Affected Services: Websites and applications running PHP (all versions) on all platforms. Current Status: In the meantime, customers are advised to keep their CMS, themes, plugins, … Continue reading [ONGOING] PHP Security Vulnerability affecting Hosting Services | October 21, 2026 → The post [ONGOING] PHP Security Vulnerability affecting Hosting Services | October 21, 2026 appeared first on Namecheap Status.
Affected components
Update timeline
- identified Oct 21, 2026, 01:31 PM UTC
Dear customers, Please note that two PHP security vulnerabilities, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), have recently been disclosed. You may find more information about the vulnerability at https://www.php.net/archive/2026.php#2026-10-20-1 Affected Services: Websites and applications running PHP (all versions) on all platforms. Current Status: In the meantime, customers are advised to keep their CMS, themes, plugins, … Continue reading [ONGOING] PHP Security Vulnerability affecting Hosting Services | October 21, 2026 → The post [ONGOING] PHP Security Vulnerability affecting Hosting Services | October 21, 2026 appeared first on Namecheap Status.
Your product runs on more than Namecheap
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services