PHP2Shell statement record · Host
Status in the company's own words: patching. Statement dated Posted 21st October, 2026; latest update Oct 22nd 11:00est.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on www.hostgator.com, dated Posted 21st October, 2026; latest update Oct 22nd 11:00est. Source type: status page.Our teams have successfully patched the majority of servers and are completing updates on the remaining systems.
Our teams have successfully patched the majority of servers and are completing updates on the remaining systems.
(Oct 21st 23:00est) and If you are on a patched version of PHP, no action is needed; we are applying patches for you.
quoted from https://www.hostgator.com/status/announcement/277 (title: PHP Update). Oct 22nd 11:00est reports significant progress
with no completion notice. VPS/dedicated customers run a package update through their control panel; lists backported builds for 8.1, 8.0, 7.4 and alt-php 5.2 to 7.3 without calling them end-of-life.
differs
Yes—HostGator has affected PHP infrastructure and has patched most, but has not confirmed that all servers are patched. As of October 23, 2026, its latest official update is October 22 at 18:15 (labeled “est” on its page): deployment continues on remaining infrastructure, with the majority up to date. Its earlier update explicitly identifies CVE-2026-109618 and CVE-2026-109619. Source: HostGator’s official
differs
Based on my thorough search of available sources, I was unable to find any public statement, advisory, or announcement specifically from or about HostGator regarding PHP2Shell (CVE-2026-109618 and CVE-2026-109619). No security bulletin, blog post, or third-party report mentioning HostGator's specific response to these CVEs appeared in any search results. Here is what is known about the vulnerabilities themselves and
differs
HostGator’s status is not publicly confirmed in the available sources. Since PHP2Shell affects the PHP engine itself, HostGator would be affected wherever its shared, reseller, VPS, or dedicated hosting servers run an unpatched PHP version; the vulnerabilities affect PHP installations serving web requests, including PHP-FPM and Apache/mod_php. PHP released fixes on October 21, 2026, in PHP 8.2.35, 8.3.36, 8.4.27,
differs
HostGator was affected by the PHP2Shell remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), and HostGator has been rolling out patches across its hosting infrastructure. Status & Details Impact: HostGator's infrastructure runs on PHP environments affected by the core runtime flaws in CVE-2026-109618 and CVE-2026-109619. Patch Status: HostGator stated that its teams have made significant progress deploying patched PHP builds
no status named
Impact Status: Yes, HostGator's hosting infrastructure utilizing vulnerable PHP builds was affected by the PHP2Shell remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Patch Status: HostGator's teams have made significant progress and the majority of their shared and managed hosting platforms are now up-to-date with patched PHP builds, while rollout across remaining infrastructure continues. Source: Official updates and deployment tracking
One card per engine, the latest capture. Every capture is in ai-answers.json. Answers are captured through the engines' APIs and Google's answer surfaces, verbatim, with cited URLs, under the Broadcastwell method v1.1; one answer per engine per question per day for the watch.
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for HostGator reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
HostGator's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about HostGator and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy