PHP Security Mitigation – Shared Hosting Servers

Incident Report for Hostek

Update

In life PHP versions are now undergoing patching.
This should not cause any real disruption, although you may briefly notice a service restart.
Posted Oct 21, 2026 - 16:22 UTC

Monitoring

PHP Security Mitigation – Shared Hosting Servers

We have applied a mitigation across all shared hosting servers by setting session.upload_progress.enabled = Off in PHP.
This change has been implemented in response to a recently disclosed PHP vulnerability. Patching of affected PHP versions will begin as soon as the vendor releases the relevant updates, which are currently expected later today for linux based OS, with Windows patches following shortly after.

Impact on your website
If your website relies on PHP session upload progress functionality, you may need to update your code in the short term to remove or bypass this functionality until the relevant PHP patches are available and applied.
We will continue to monitor the situation and provide further updates as patching progresses.
Posted Oct 21, 2026 - 09:38 UTC
This incident affects: Shared Services.