one.com
- Aliases / services
- one.com
- Official website
- https://one.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Web Hosting / PHP Extended Support
- Response status
- Patched
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The October 22 notice confirms fixes for Web Hosting, including legacy PHP under Extended Support, while retaining PHP branches.
Scope: Treat Managed VPS and unmanaged VPS as separate service scopes.
What users should do
No PHP patch action is required for this scope.
Official service URL
Source URLs
- https://www.one.com/en-us/news/php-security-vulnerabilities-fixed/https://www.one.com/en-us/news/php-security-vulnerabilities-fixed/Response evidence
- https://status.one.com/https://status.one.com/Service and operation documentation
- https://www.one.com/en-us/news/https://www.one.com/en-us/news/Service and operation documentation
Managed VPS
- Response status
- Patched
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The notice confirms Managed VPS remediation.
What users should do
No PHP patch action required for this scope.
Source URLs
- https://www.one.com/en-us/news/php-security-vulnerabilities-fixed/https://www.one.com/en-us/news/php-security-vulnerabilities-fixed/Response evidence
Unmanaged VPS
- Response status
- Customer update required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Unmanaged VPS software remains customer-managed.
What users should do
Check and update PHP and dependent software.
Source URLs
- https://www.one.com/en-us/news/php-security-vulnerabilities-fixed/https://www.one.com/en-us/news/php-security-vulnerabilities-fixed/Response evidence
Related official sources
- one.com: PHP configuration and managementOfficial information directoryPHP operations documentation; incident patch deployment unconfirmed.
Comments