BanaHosting

Global hosting

Aliases / services: BanaHosting / banahosting.com
Official website: https://www.banahosting.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared Hosting and Reseller Hosting

Response status: Patched
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The provider reports patching installed PHP branches, including legacy EA4 and CloudLinux PHP Selector versions, restarting PHP processes and verifying each shared/reseller server.

Scope: Selected PHP branches and configuration remain unchanged. Completion is not extended to VPS or dedicated servers.

What users should do

No customer PHP patching is required. Continue updating CMS, themes and plugins; use a client-area ticket for account-specific questions.

Official service URL

https://www.banahosting.com/

Source URLs

PHP security update completedhttps://manage.banahosting.com/index.php?rp=/announcements/32/Critical-PHP-Security-Release-CVE-2026-109618-and-CVE-2026-109619-Hosting-and-Reseller-servers-updated.htmlResponse evidence
https://manage.banahosting.com/index.php?rp=/announcementshttps://manage.banahosting.com/index.php?rp=/announcementsService and operation documentation

Related official sources

PHP security update completedOfficial noticeOfficial notice on this incident and the scope of the response.