PHP Vulnerability Responses by Company

HostPinnacle

Global hosting
Aliases / services
HostPinnacle / hostpinnacle.co.ke
Official website
https://www.hostpinnacle.co.ke/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared / reseller hosting

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

An October22 update confirms all shared and reseller servers are fully patched.

Scope: Do not extend completion to managed or self-managed servers.

What users should do

No customer patching action is required; test compatibility when upgrading legacy PHP.

Official service URL

Source URLs

  1. https://www.hostpinnacle.co.ke/clients/index.php?rp=/announcements/34/Security-Update-PHP-Vulnerabilities-CVE-2026-109618-and-CVE-2026-109619.htmlhttps://www.hostpinnacle.co.ke/clients/index.php?rp=/announcements/34/Security-Update-PHP-Vulnerabilities-CVE-2026-109618-and-CVE-2026-109619.htmlResponse evidence
  2. https://www.hostpinnacle.co.ke/clients/index.php?rp=/announcementshttps://www.hostpinnacle.co.ke/clients/index.php?rp=/announcementsService and operation documentation
  3. https://hostpinnacle.co.ke/clients/index.php?rp=/announcements/29/Your-hosting-is-getting-an-upgrade--heres-whats-changing..htmlhttps://hostpinnacle.co.ke/clients/index.php?rp=/announcements/29/Your-hosting-is-getting-an-upgrade--heres-whats-changing..htmlService and operation documentation

Managed hosting

Response status
Protected; updates underway
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Protective PHP settings/WAF and patch rollout are reported. The completion update names shared/reseller, not managed hosting.

Scope: Do not broaden the completion update.

What users should do

Ask support about the individual server's update status.

Source URLs

  1. https://www.hostpinnacle.co.ke/clients/index.php?rp=/announcements/34/Security-Update-PHP-Vulnerabilities-CVE-2026-109618-and-CVE-2026-109619.htmlhttps://www.hostpinnacle.co.ke/clients/index.php?rp=/announcements/34/Security-Update-PHP-Vulnerabilities-CVE-2026-109618-and-CVE-2026-109619.htmlResponse evidence

Self-managed VPS / dedicated servers

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provider updates do not reach these servers; customers must update PHP.

Scope: Shared/reseller completion does not cover this scope.

What users should do

Install applicable PHP fixes and restart services; temporary settings are not a complete fix.

Source URLs

  1. https://www.hostpinnacle.co.ke/clients/index.php?rp=/announcements/34/Security-Update-PHP-Vulnerabilities-CVE-2026-109618-and-CVE-2026-109619.htmlhttps://www.hostpinnacle.co.ke/clients/index.php?rp=/announcements/34/Security-Update-PHP-Vulnerabilities-CVE-2026-109618-and-CVE-2026-109619.htmlResponse evidence
Related official sources
  1. Migration from cPanel to DirectAdminOfficial information directoryOfficial documentation for PHP operation or the supplied service.
  2. PHP environment for WordPress hostingOfficial information directoryOfficial documentation for PHP operation or the supplied service.

Comments