PHP2Shell statement record · Host
Status in the company's own words: patched partly. Statement dated 2026-10-22 10:24 UTC (Identified; first 2026-10-21 03:27 UTC).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on status.inmotionhosting.com, dated 2026-10-22 10:24 UTC (Identified; first 2026-10-21 03:27 UTC). Source type: status page.PHP version upgrades are being committed and have already been performed across Shared and Dedicated servers.
PHP version upgrades are being committed and have already been performed across Shared and Dedicated servers.
(2026-10-22 01:02 UTC) and The PHP version upgrades for the VPS fleets are still in progress.
(2026-10-22 10:24 UTC) quoted from https://status.inmotionhosting.com/incidents/5b3dee2d-6b8e-4a58-88e4-812ef43ef43a (title: Security Maintenance: PHP Configuration Updates). Mitigation: default session.upload_progress.enabled disabled; CWP/CWP Admin ports restricted. Older PHP: We are awaiting the upstream security patch from CloudLinux for older PHP versions.
(2026-10-21 20:16 UTC). Support news page could not be fetched.
differs
Yes—InMotion Hosting’s PHP infrastructure was affected, but patching is not confirmed complete across every hosting environment. Its official advisory, updated October 22, 2026, explicitly addresses both CVE-2026-109618 and CVE-2026-109619. As checked on October 23, 2026, its latest detailed deployment statement says: | Hosting environment | Reported patch status | |---|---| | Shared, Reseller, WordPress Hosting | Patched, including CloudLinux
differs
Yes, InMotion Hosting is affected by PHP2Shell, and has been actively working on patching it. Here is a full breakdown: What is PHP2Shell? CVE-2026-109618 and CVE-2026-109619, nicknamed "PHP2Shell," are two critical PHP flaws that allow unauthenticated remote code execution — an attacker only needs to send a crafted web request, with no login required. Both are rated CVSS v4.0
differs
Yes. InMotion Hosting was affected because PHP2Shell impacts PHP installations serving web requests, but its patch status varies by hosting type. Dedicated servers: Patched. InMotion says patched PHP packages addressing both CVEs were applied across all dedicated-server infrastructure. Shared hosting: Patched/complete. CloudLinux released the fixed packages, and InMotion says they were being applied across shared-hosting servers. The PHP version
no status named
Yes, InMotion Hosting was affected by the PHP2Shell vulnerabilities ( and CVE-2026-109619). Patch Status: Patches are complete for shared hosting and dedicated servers (with backported updates possibly showing older version strings), while deployment for VPS is ongoing . Source: Official InMotion Hosting Status Page - Security Maintenance: PHP Configuration Updates . If you are using an InMotion Hosting VPS
differs
Yes, InMotion Hosting was affected by the "php2shell" vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which involve critical unauthenticated remote code execution flaws in PHP. InMotion Hosting took proactive mitigation steps and has been addressing the issue: Mitigation Action: Starting on October 20, 2026, InMotion Hosting began applying urgent security mitigations across their server infrastructure by disabling the default session.upload_progress.enabled PHP setting
One card per engine, the latest capture. Every capture is in ai-answers.json. Answers are captured through the engines' APIs and Google's answer surfaces, verbatim, with cited URLs, under the Broadcastwell method v1.1; one answer per engine per question per day for the watch.
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for InMotion Hosting reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
InMotion Hosting's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about InMotion Hosting and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy