P2 - [WEBHOSTING] - PHP Emergency maintenance

What to do

• Check whether you use Scaleway Hosting, Web Hosting. Check your stack

  Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.

• Expect Scaleway to be limited until the window closes.

  Pause deploys or jobs that need it, and warn your users if they will notice.

• Watch Scaleway's own updates; this page re-reads them every minute.

• Subscribe to Scaleway's feed to hear about the next one first. RSS feed

  https://down.guide/feed?provider=scaleway works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from Scaleway 3

1. identifiedOct 21, 2026, 2:38 PM UTC

   The PHP project released today a fix for two critical vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5 As a precaution, we have taken Webhosting websites offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.

   provider

2. identifiedOct 22, 2026, 6:20 AM UTC

   [Update] Security Maintenance – Web Hosting Services Security patching for the php2shell vulnerability is progressing: cPanel Environments (Resolved): PHP versions have been updated across all Scaleway and Online.net cPanel servers (as well as Scaleway Plesk). Maintenance mode has been lifted, and services are back online. Classic Shared Hosting / Mutu (In Progress): Classic shared environments remain under maintenance while work is actively underway.

   provider

3. identifiedOct 26, 2026, 4:55 PM UTC

   [Update] Security Maintenance – Web Hosting Services Classic Shared Hosting / Mutu (Back online): Patched PHP versions (5.6, 7.0, 7.1, 7.2 and 7.3) have been fully deployed across all Classic shared hosting environments, and maintenance mode has been lifted. Websites are back online, except PHP 4 which remains in maintenance. Current behavior per PHP version: -PHP 7.x: websites are served normally on their patched PHP version. -PHP 5.x: websites previously running PHP 5.2, 5.4 or 5.5 have been automatically migrated to PHP 5.6 (patched) and are served normally. We recommend that customers check that their websites are working correctly after this version change, following the recommendations in this guide: https://www.scaleway.com/en/docs/webhosting/reference-content/php-5-6-migration-guide/ -PHP 4: websites remain in maintenance and are served a maintenance page. Customers can bring their websites back online by migrating to PHP 5.6 or later. We apologize for the inconvenience, and thank you for your patience.

   provider

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.