Hosting
PHP2Shell: hardened the same day, patched by breakfast
Two critical PHP vulnerabilities, nicknamed PHP2Shell, were disclosed on 21 October 2026. We applied interim protection across our platform the same day and had patched PHP running on our shared hosting servers by 6:26 AM AEST on 22 October.