PHP Security Update for Web, Agency and cPanel Hosting
Started
On October 23, 2026, the PHP project announced a new vulnerability (CVE-2026-115560).
Websites on our Web Hosting, Agency Hosting, and cPanel Hosting plans are already protected by the mitigation applied on October 21. No action is needed. PHP's upcoming regular update will be applied as part of our normal maintenance and does not change your protection.
VPS clients manage PHP themselves. If your VPS runs PHP, set session.upload_progress.enabled=0 in php.ini and restart PHP. If you already did this on October 21, no further action is needed. Guide: https://www.hostinger.com/blog/protecting-php2shell/
PHP Security Update for Web, Agency and cPanel Hosting
Started
On October 23, 2026, the PHP project announced a new vulnerability (CVE-2026-115560).
Websites on our Web Hosting, Agency Hosting, and cPanel Hosting plans are already protected by the mitigation applied on October 21. No action is needed. PHP's upcoming regular update will be applied as part of our normal maintenance and does not change your protection.
VPS clients manage PHP themselves. If your VPS runs PHP, set session.upload_progress.enabled=0 in php.ini and restart PHP. If you already did this on October 21, no further action is needed. Guide: https://www.hostinger.com/blog/protecting-php2shell/