PHP Vulnerability Responses by Company

Spire Hosting

Global cloud / infrastructure
Aliases / services
Spire Hosting / Spire Web Group Ltd
Official website
https://spirehosting.co.uk/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Shared and reseller hosting patched
Response information checked
2026-10-27 Rechecked: 2026-10-27

UK hosting operated by Spire Web Group Ltd.

PHP 8.2.35, 8.3.36 and 8.4.27 were deployed to shared, reseller and agency hosting on October 21, with additional WAF protection.

What users should do

Customers on those hosting plans need no action. Self-managed VPS users must update PHP and restart PHP or web services.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://spirehosting.co.uk/blog/php-security-update-cve-2026-109618-cve-2026-109619/Response evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments