Serverplan
- Aliases / services
- Serverplan / serverplan.com
- Official website
- https://www.serverplan.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Linux shared hosting / cPanel
- Response status
- Shared hosting patched
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Shared cPanel hosting was patched by16:30 on21October. Additional CloudLinux updates, including legacy PHP, completed on managed machines by10:00 on22October.
Scope: Limited to shared cPanel hosting; not evidence for self-managed servers. The article separately documents CVE-2026-115560 mitigation.
What users should do
Check CMS compatibility and migrate to supported PHP. Verify package revisions, not only displayed versions, for backports.
Official service URL
Source URLs
- https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/Response evidence
cPanel servers with systems administration
- Response status
- Available fixes applied; exceptions remain
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Managed cPanel servers received available fixes by21:00 on21October; CloudLinux legacy updates followed by10:00 on22October.
Scope: Limited to vendor-patched versions under the specified managed contract. Do not extend completion to all legacy runtimes, self-managed systems or other CVEs.
What users should do
Verify package builds by OS and PHP branch. Do not assume old PHP outside CloudLinux has equivalent coverage.
Source URLs
- https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/Response evidence
Plesk Linux servers with systems administration
- Response status
- Available fixes applied; exceptions remain
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Available fixes were applied to managed Plesk Linux servers by19:00 on21October, with legacy coverage limited by the official table.
Scope: Limited to vendor-patched versions under the specified managed contract. Do not extend completion to all legacy runtimes, self-managed systems or other CVEs.
What users should do
Verify21October builds for PHP7.4/8.0/8.1. Contact support to verify and apply mitigation for the separate CVE-2026-115560.
Source URLs
- https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/Response evidence
Windows hosting / Plesk
- Response status
- Available fixes applied; exceptions remain
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Available updates were applied to Plesk Windows hosting by22:00 on21October. The official table lists fixed PHP8.2–8.5.
Scope: Limited to vendor-patched versions under the specified managed contract. Do not extend completion to all legacy runtimes, self-managed systems or other CVEs.
What users should do
Verify the running PHP against the fixed-version table. Follow the Plesk support-contact instruction for separate CVE-2026-115560.
Source URLs
- https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/Response evidence
Plesk Windows servers with systems administration
- Response status
- Available fixes applied; exceptions remain
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Available updates were applied to managed Plesk Windows servers by22:00 on21October. Fixed PHP8.2–8.5 releases are listed.
Scope: Limited to vendor-patched versions under the specified managed contract. Do not extend completion to all legacy runtimes, self-managed systems or other CVEs.
What users should do
Verify management coverage and the active PHP branch. Contact support to verify and apply mitigation for separate CVE-2026-115560.
Source URLs
- https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/https://www.serverplan.com/blog/php2shell-due-vulnerabilita-critiche-in-php-necessario-aggiornare-i-siti-web/Response evidence
Related official sources
- Serverplan: PHP configuration and operationsOfficial information directory
Comments