Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Listed services and systems
- Response status
- Managed servers patched; self-managed VPS needs updates
- Response information checked
- 2026-10-27 Rechecked: 2026-10-27
Hosting and VPS services from Chile's Premium Hosting Solutions SpA.
Its October 22 14:00 update confirmed all PHP branches on operated servers patched for both CVEs. CloudLinux version numbers may remain unchanged. Virtualization-host fixes do not update PHP inside customer VPSs.
What users should do
Self-managed VPS users must update and restart their own PHP. For the separate October 23 CVE, it also advises the interim setting session.upload_progress.enabled=0.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://premiumhosting.cl/soporte/news/view/124/alerta-vulnerabilidad-php/Response evidence
- Operating entityhttps://status.premiumhosting.cl/privacidadService and operation documentation
Comments