PHP Vulnerability Responses by Company

Zooku

Global hosting
Aliases / services
Zooku / zooku.ro / Zooku Solutions / Zooku Solutions SRL
Official website
https://www.zooku.ro/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

cPanel shared hosting

Response status
Official patches deployed and running processes verified
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Official patches were installed October21-22 and verified in running PHP processes. PHP4.4/5.1, which lacked fixes, were removed and affected sites moved to patched versions.

Scope: Separate from ongoing updates on proprietary Zooku hosting and self-managed VPS. WAF and disabled upload-progress protections remain.

What users should do

No customer action is needed for this server patch. Ask support to verify the build if an older version is displayed.

Official service URL

Source URLs

  1. https://www.zooku.ro/blog/corectia-php2shell-pe-serverele-cpanel-de-ce-versiunea-php-afisata-poate-ramane-aceeasi/https://www.zooku.ro/blog/corectia-php2shell-pe-serverele-cpanel-de-ce-versiunea-php-afisata-poate-ramane-aceeasi/Response evidence
  2. Zooku: PHP vulnerability responsehttps://www.zooku.ro/blog/php2shell-ce-am-facut-pentru-site-urile-dvs/Response evidence
  3. https://www.zooku.ro/https://www.zooku.ro/Service and operation documentation

Zooku custom hosting

Response status
Mitigation applied; updates reported ongoing
Response information checked
2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-27

The October 22 official notice reports blocking known attack paths while updates to Zooku's custom hosting platform continue. A completion update was not verified.

Scope: The official article body was available in search retrieval. Direct article access returned 403, preventing current completion verification.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Check the latest service guidance. Do not apply the cPanel completion statement to this custom platform.

Source URLs

  1. Zooku: PHP vulnerability responsehttps://www.zooku.ro/blog/php2shell-ce-am-facut-pentru-site-urile-dvs/Response evidence

Self-managed VPS

Response status
Customer patching and restart required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Zooku requires customers to update PHP and restart running processes on self-managed VPS. Automatic-update settings alone do not verify remediation.

Scope: Disabling session.upload_progress is a temporary mitigation and does not replace complete fixes for both CVEs.

What users should do

Install patched packages, restart relevant processes and verify changelogs and running builds. Consider migration from unsupported PHP.

Source URLs

  1. https://www.zooku.ro/blog/php2shell-pe-un-vps-administrat-de-dvs-ce-aveti-de-facut/https://www.zooku.ro/blog/php2shell-pe-un-vps-administrat-de-dvs-ce-aveti-de-facut/Response evidence
Related official sources
  1. Zooku: PHP vulnerability responseOfficial notice

Comments