A new PHP vulnerability is in the news. We tested it on our live servers: it can’t be used to take over sites hosted with us, WordPress included.
PHP has released a fix, and we’re applying it across all hosting today anyway. No action needed on your side.
@arturdemoraism Oi, entendemos a frustração, de verdade. Essa manutenção não foi programada, estamos verificando o que causou e trabalhando o mais rápido possível pra garantir que tudo volte ao normal o quanto antes.
@Nutrition1974 8.4.26 is expected. We built the fix into the version your site already runs, so the number doesn't change. PHP Info in your dashboard should show a build date of Oct 21 or later. https://t.co/l0VxdTjYzj
@joaoverdadee Estamos fazendo o possível para que ela seja finalizada o quanto antes. Todas atualizações serão compartilhadas por aqui: https://t.co/aVLOmFRKRe
🤖 Xiaomi just released MiMo V2.6, a new open-source AI model that's natively multimodal and genuinely competitive with models like Claude Opus 5 on agentic benchmarks. It's already integrated with Hermes Agent and works with OpenClaw too.
@AstachLuan Olá, essa manutenção não foi programada pelo nosso lado – estamos verificando todos os detalhes para entender o que ocorreu e trazer o serviço de volta o quanto antes. Obrigado pela paciência.
@euAlanGabriel Oi, sentimos muito pela interrupção, não foi nosso plano. Estamos trabalhando com o time responsável para entender o que aconteceu e realizar a correção o quanto antes.
@opfelisberto Olá, sentimos muito pela interrupção, também não era nossos planos. Nosso time de infraestrutura já está verificando os detalhes do que aconteceu e trabalhando para garantir que os serviços voltem o quanto antes.
@fuckroeper Hi, the PHP patch is live for our managed hosting plans – if you have a VPS plan, the patch needs to be done manually from your side. More details: https://t.co/l0VxdTjYzj
@NovaLima24h Olá, caso seja sobre o datacenter BR, estamos cientes da situação – não foi uma manutenção programada pelo nosso lado, mas estamos trabalhando para trazer os serviços de volta o quanto antes. https://t.co/aVLOmFRKRe
@Smiledigitalsol Could you drop us a DM with your Hostinger account email address or a website name?
We'll check everything out from our side and see what can be done 🙏
Update: On October 23, 2026, the PHP project announced a new vulnerability (CVE-2026-115560). PHP will include the fix in its next regular release.
Every Hostinger hosting plan except VPS is already protected by the mitigation applied on October 21. No action is needed. We will install PHP's fix once it is released.
VPS clients manage PHP themselves. If your VPS runs PHP, set session.upload_progress.enabled=0 in php.ini and restart PHP. If you already did this on October 21, you don't need to do anything else. Check Guide: https://t.co/RDXFXAAZT2
Live updates are on our Status Page: https://t.co/yW1nPhBH4h
A new PHP vulnerability is in the news. We tested it on our live servers: it can’t be used to take over sites hosted with us, WordPress included.
PHP has released a fix, and we’re applying it across all hosting today anyway. No action needed on your side.
@osamakingbe Looks good on your end! The patch went into your current PHP versions, so 8.4.26 stays 8.4.26, but the build date of Oct 21, 2026 shows the fix is there. Details here: https://t.co/KtVblIMj27, and our support team is around if you’d like a hand 👀
Thanks for sharing, and totally understand why you’d want the full picture! Please be assured our team is monitoring around the clock and keeps updating our protections as things develop. Really glad our specialist could help, and if anything else comes up, our support team is happy to assist.
@techyoutbe Default bridge is fine until a container restarts and its IP changes. On a single VPS the fix is almost never a custom network - it is a reverse proxy in front and only the proxy port published. Everything else stays on the bridge.
@innopro_ Self-hosting Stirling-PDF is free until the OCR jobs hit. On a 2 GB VPS a single concurrent conversion plus the UI can push the box into swap. Give it 4 GB and a dedicated volume for temp files, or the “free” setup becomes the bottleneck.
@janikowskipiotr@trifaleyheramb That loading screen is our security check, and it usually goes through once VPNs, ad blockers or privacy extensions are paused. Clearing your browser cookies and making sure your device’s date and time are correct can help too. If anything, drop us a DM!
@vinayships Let’s get this sorted! A quick refresh rarely fixes this one, so try clearing your browser cache, turning off any VPN or ad blocker, or opening the dashboard in another browser. Still stuck? Tap the Agent button in your Hostinger dashboard and our team will check it with you 💜