PHP Vulnerability Responses by Company

IONOS

Global cloud / infrastructure
Aliases / services
イオノス / 1&1 IONOS / 1and1 / IONOS
Official website
https://www.ionos.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Hosting — IONOS-managed PHP / PHP Extended Support

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

IONOS reports required fixes on PHP versions managed through the IONOS account, including upstream end-of-life versions.

Scope: Covers PHP managed by IONOS, not customer-managed server installations.

What users should do

Check website operation; consider moving from Extended Support to a currently supported PHP branch.

Official service URL

Source URLs

  1. IONOS: PHP2Shell information for your contracthttps://www.ionos.com/help/hosting/php2shell-security-vulnerability-important-information-regarding-your-ionos-contract/Response evidence

VPS / Dedicated Server — customer-managed PHP

Response status
Customer updates required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

IONOS explicitly excludes customer-operated PHP installations from its infrastructure patching.

Scope: Distinguish by who manages PHP, not only by the contract label.

What users should do

Update PHP and restart all PHP services. Check logs and suspicious files; follow official recovery steps if compromise is found.

Official service URL

Source URLs

  1. IONOS: PHP2Shell information for your contracthttps://www.ionos.com/help/hosting/php2shell-security-vulnerability-important-information-regarding-your-ionos-contract/Response evidence
Related official sources
  1. IONOS: PHP2Shell information for your contractOfficial notice

Comments