PHP Vulnerability Responses by Company

HostX

Global hosting
Aliases / services
HostX / hostx.ro / HostX Web Services SRL
Official website
https://www.hostx.ro/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Linux shared hosting

Response status
Temporary mitigation; PHP update announced
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 21 notice reports active Imunify360 rules and plans to update PHP after patched packages become available. The checked article contains no completed-update timestamp.

Scope: This covers Linux shared hosting; Windows, managed and self-managed servers are separate.

What users should do

Ask support to confirm PHP patch completion on your server. WAF rules alone do not establish completion.

Official service URL

Source URLs

  1. https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/Response evidence

Windows hosting

Response status
PHP update announced
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 21 notice plans to update PHP in Plesk once fixes are available. Completion was not confirmed.

Scope: Linux shared hosting’s Imunify360 measures are not attributed to Windows.

What users should do

Ask support whether the relevant PHP fixes have been installed.

Source URLs

  1. https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/Response evidence

HostX-managed VPS and dedicated servers

Response status
Provider update announced
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 21 notice assigns PHP updates on HostX-managed servers to the provider. It does not report completion for all managed servers.

Scope: Customers update self-managed servers; this does not cover environments without a management agreement.

What users should do

Confirm management coverage, patch deployment and required restarts on the actual server.

Source URLs

  1. https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/Response evidence

Self-managed VPS and dedicated servers

Response status
Customer remediation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 21 notice directs customers managing their servers to patch PHP and restart the relevant services.

Scope: Managed-server or shared-hosting responses do not establish completion for these environments.

What users should do

Confirm CVE fixes with the PHP package vendor, install updates, restart and test. Contact support if needed.

Source URLs

  1. https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/https://blog.hostx.ro/securitate/php2shell-vulnerabilitatile-critice-din-php-explicate/Response evidence
Related official sources
  1. HostX: PHP configuration and managementOfficial information directory
  2. HostX: operating-company informationOfficial information directory

Comments