PHP Vulnerability Responses by Company

Canadian Web Hosting

Global hosting
Aliases / services
Canadian Web Hosting / canadianwebhosting.com / カナディアンウェブホスティング
Official website
https://canadianwebhosting.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared Hosting / cPanel and Plesk

Response status
cPanel rollout; Plesk response not listed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 22 notice says shared cPanel patching began October 21, with remaining branches awaiting vendor builds.

Scope: WAF is interim. No completion update covering all shared servers or Plesk was found.

What users should do

The provider handles shared cPanel updates. Verify account completion and ask separately about Plesk.

Official service URL

Source URLs

  1. https://blog.canadianwebhosting.com/php2shell-cve-2026-109618-109619/https://blog.canadianwebhosting.com/php2shell-cve-2026-109618-109619/Response evidence
  2. Canadian Web Hosting: PHP configuration and operationhttps://canadianwebhosting.com/hosting/compare-our-productsService and operation documentation

Managed WordPress

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

All sites moved to patched PHP 8.4 on October 22.

Scope: Separate from the shared cPanel rollout.

What users should do

No patching action required; report problems to support.

Source URLs

  1. https://blog.canadianwebhosting.com/php2shell-cve-2026-109618-109619/https://blog.canadianwebhosting.com/php2shell-cve-2026-109618-109619/Response evidence

Unmanaged VPS / Cloud / Dedicated

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customers must update PHP and restart all PHP workers.

Scope: Confirm managed-support contracts individually.

What users should do

Install a fixed PHP build; verify the web runtime and restart workers.

Source URLs

  1. https://blog.canadianwebhosting.com/php2shell-cve-2026-109618-109619/https://blog.canadianwebhosting.com/php2shell-cve-2026-109618-109619/Response evidence
Related official sources
  1. Canadian Web Hosting: PHP configuration and operationOfficial information directoryPHP operational documentation.
  2. Canadian Web Hosting: PHP configuration and operationOfficial information directoryPHP operational documentation.

Comments