AltusHost

Shared hosting

Response status

Provider maintenance guidance published

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The 21 October notice assigns shared-platform PHP and web-server maintenance to the provider without a fleet completion timestamp.

Scope: Responsibility guidance is not confirmation that every environment is patched.

What users should do

Do not change the underlying OS yourself; ask support to verify the installed security build.

Official service URL

• https://altushost.com/

Source URLs

1. AltusHost: PHP vulnerability responsehttps://altushost.com/php2shell-critical-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619/Response evidence

Managed VPS and dedicated servers

Response status

Updates depend on management scope

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The 21 October notice assigns PHP/OS updates according to the management contract.

Scope: No completion claim for all managed servers.

What users should do

Ask whether custom PHP or applications are included and confirm installed fixes.

Source URLs

1. AltusHost: PHP vulnerability responsehttps://altushost.com/php2shell-critical-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619/Response evidence

Unmanaged VPS and dedicated servers

Response status

Customer updates required

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customers maintain PHP and operating-system security on unmanaged environments.

Scope: CLI version output or CMS updates alone do not verify all web runtimes.

What users should do

Patch each web PHP runtime, restart affected workers and verify loaded fixes.

Source URLs

1. AltusHost: PHP vulnerability responsehttps://altushost.com/php2shell-critical-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619/Response evidence