PHP Vulnerability Responses by Company

Hawk Host

Global hosting
Aliases / services
Hawk Host / hawkhost.com
Official website
https://www.hawkhost.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared Web Hosting / PHP Selector & MultiPHP / self-managed VPS

Response status
Shared hosting patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

All shared-hosting alt-php and ea-php packages are patched. VPS customers receive panel-specific update instructions.

Scope: Shared completion does not certify customer VPS installations.

What users should do

Shared users need no branch change for these fixes. VPS users must verify automatic updates or apply their panel's procedure.

Official service URL

Source URLs

  1. Hawk Host: PHP CVE-2026-109618 & CVE-2026-109619 Protectionhttps://www.hawkhost.com/kb/programming/php/php-security-release-cve-2026-109618-cve-2026-109619/Response evidence
  2. https://www.hawkhost.com/blog/2026-10-22-php2shell-cve-2026-109618-cve-2026-109619/https://www.hawkhost.com/blog/2026-10-22-php2shell-cve-2026-109618-cve-2026-109619/Service and operation documentation
Related official sources
  1. Hawk Host: PHP configuration and managementOfficial information directoryPHP operations documentation; incident patch deployment unconfirmed.
  2. Hawk Host: PHP CVE-2026-109618 & CVE-2026-109619 ProtectionOfficial notice

Comments