Prostack

Global hosting

Aliases / services: Prostack / prostack.uk
Official website: https://prostack.uk/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Cito / CloudLinux / cPanel managed hosting

Response status: Patched by environment; legacy cPanel exception
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Cito PHP5.6–8.4, CloudLinux5.2+ and cPanel's own PHP7.4+ are patched. cPanel PHP below7.4 remains unpatched.

Scope: Deployment to every server does not mean every PHP branch was fixed. The October23 configuration change for another CVE is not a substitute for PHP2Shell patches.

What users should do

Move cPanel sites below7.4 to a newer branch or patched CloudLinux PHP. Check build dates when backports retain version numbers.

Official service URL

https://prostack.uk/

Source URLs

Prostack: PHP vulnerability responsehttps://prostack.uk/blog/critical-php-security-update-october-2026/Response evidence

Related official sources

Prostack: PHP vulnerability responseOfficial noticeOfficial incident notice reviewed.