PHP Vulnerability Responses by Company

OVH SAS

Global cloud / infrastructure
Aliases / services
OVH / オーブイエイチ / OVHcloud / OVH SAS
Official website
https://www.ovhcloud.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

WebCloud / Shared Hosting

Response status
Patching and maintenance completed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

All clusters received patches for PHP 7.4–8.5 on October 21 and 5.3–7.3 on October 23. Maintenance completed October 26.

Scope: Applies to Web Hosting, not customer-managed PHP on VPS or dedicated servers.

What users should do

Check site functionality and contact support for remaining problems.

Official service URL

Source URLs

  1. https://web-cloud.status-ovhcloud.com/incidents/6ct3ggp512xkhttps://web-cloud.status-ovhcloud.com/incidents/6ct3ggp512xkResponse evidence

Bare Metal / VPS — customer-managed PHP

Response status
Customer updates required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Instructions cover updating and restarting customer-managed PHP on Bare Metal/VPS. OVHcloud also reports updating installation OS images.

Scope: Updated installation images do not automatically patch PHP on existing customer servers.

What users should do

Install patched PHP packages, restart PHP-FPM or Apache, and verify operation.

Official service URL

Source URLs

  1. OVHcloud: Critical PHP vulnerabilities on Bare Metal and VPShttps://blog.ovhcloud.com/en/posts/critical-php-vulnerabilities-bare-metal-vps/Response evidence
Related official sources
  1. OVHcloud: Critical PHP vulnerabilities on Bare Metal and VPSOfficial notice

Comments