PHP Vulnerability Responses by Company

Hetzner Online GmbH

Global cloud / infrastructure
Aliases / services
Hetzner Online / ヘッツナー / Hetzner / Hetzner Online GmbH
Official website
https://www.hetzner.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Webhosting / Managed Server

Response status
Managed PHP versions patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides web hosting, managed servers, and cloud servers.

Hetzner reports patches for Webhosting and Managed Servers on PHP 7.4 and 8.0–8.5, followed by PHP 5.6 and 7.3 on October 22 at 04:32 UTC.

Scope: Completion covers the listed PHP versions on these managed products. Rollout announcements for other systems do not establish their completion.

What users should do

Check your managed PHP version. Update PHP separately on self-managed Cloud and dedicated servers.

Official service URL

Source URLs

  1. PHP security issues CVE-2026-109618 and CVE-2026-109619https://status.hetzner.com/incident/f4144d55-38c3-48d1-8664-7a3429355cd7Response evidence
Related official sources
  1. PHP security issues CVE-2026-109618 and CVE-2026-109619Official notice

Comments