No impact incident

Hostek: PHP Security Mitigation – Shared Hosting Servers

Affected: Shared Services

Current status of Hostek: Minor issues — live Hostek status

Timeline

1. Oct 21, 2026, 09:38 UTC
   monitoring
   PHP Security Mitigation – Shared Hosting Servers We have applied a mitigation across all shared hosting servers by setting session.upload_progress.enabled = Off in PHP. This change has been implemented in response to a recently disclosed PHP vulnerability. Patching of affected PHP versions will begin as soon as the vendor releases the relevant updates, which are currently expected later today for linux based OS, with Windows patches following shortly after. Impact on your website If your website relies on PHP session upload progress functionality, you may need to update your code in the short term to remove or bypass this functionality until the relevant PHP patches are available and applied. We will continue to monitor the situation and provide further updates as patching progresses.
2. Oct 21, 2026, 16:22 UTC
   monitoring
   In life PHP versions are now undergoing patching. This should not cause any real disruption, although you may briefly notice a service restart.
3. Oct 22, 2026, 18:12 UTC
   resolved
   PHP security patches have been successfully applied across all our shared hosting servers. Both our Windows and Linux shared hosting platforms are now fully patched. For our Windows shared hosting platform, PHP versions 8.1 and older have been removed because they have reached End of Life (EOL) and no longer receive security updates. This ensures that our shared Windows hosting environment remains up to date with supported PHP versions.

Updates as published by Hostek (original).