PHP2Shell statement record · Host
Status in the company's own words: patching. Statement dated Update @ 9:33 AM EDT | 13:33 UTC, October 22 (latest; initial post October 21, 09:31 AM America/New_York).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on www.namecheap.com, dated Update @ 9:33 AM EDT | 13:33 UTC, October 22 (latest; initial post October 21, 09:31 AM America/New_York). Source type: status page.The fix has been successfully implemented on all other servers.
The fix has been successfully implemented on all other servers.
(still in progress: Regular servers 71, 72, 105, 312; Update @ 9:33 AM EDT | 13:33 UTC, October 22) quoted from https://www.namecheap.com/status-updates/ongoing-php-security-vulnerability-affecting-hosting-services-october-21-2026/ (title: [UPDATED] PHP Security Vulnerability affecting Hosting Services | October 21, 2026). Mitigations on all platforms; patched versions came via CloudLinux repositories; VPS and dedicated server owners told to update PHP themselves. A navigation link refers to a completed EasyWP PHP security maintenance (not read).
differs
Yes—Namecheap confirmed its PHP hosting services were affected, and now reports that patching is complete. As checked on October 23, 2026, its official incident notice is marked [RESOLVED]. Affected: Namecheap identified PHP-based websites and applications across its hosting platforms as affected by CVE-2026-109618 and CVE-2026-109619. Patched: Following initial mitigations and a staged rollout, the notice’s 12:50 p.m. EDT completion
match
Yes — Namecheap is affected by PHP2Shell, has acknowledged it publicly, and is actively patching. Here is a full breakdown with sources: What is PHP2Shell? PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pair of Remote Code Execution vulnerabilities in PHP that let an attacker run their own code on a web server without logging in. The PHP security team rates
no status named
Yes. Namecheap was affected: its status notice says the vulnerabilities affected websites and applications running PHP on all versions and platforms. Patch status: Namecheap initially applied mitigations while awaiting PHP’s official fixes. After PHP released patched versions, Namecheap deployed them across its hosting infrastructure; its incident was subsequently marked resolved. Namecheap also reported that remaining server deployments were completed,
differs
Affected Status: Yes, Namecheap's hosting services (including Dedicated Servers, Shared Servers, Reseller Servers, VPS, and general hosting platforms running PHP) were affected by the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Patch Status: Namecheap has marked the security incident as [RESOLVED] on their status page following PHP's release of patched versions (PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35). Source: You can read
no status named
Yes, Namecheap's hosting services were affected by the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which impact websites and applications running PHP on all platforms. Status: Resolved / Mitigated Namecheap Action: Namecheap put mitigation measures in place across all of their hosting platforms (including Shared, Dedicated, Reseller, VPS, and Hosting servers) to reduce the risk of exploitation while waiting for official
One card per engine, the latest capture. Every capture is in ai-answers.json. Answers are captured through the engines' APIs and Google's answer surfaces, verbatim, with cited URLs, under the Broadcastwell method v1.1; one answer per engine per question per day for the watch.
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Namecheap reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Namecheap's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Namecheap and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy