# P2 - \[WEBHOSTING\] - PHP Emergency maintenance

- Provider: [Scaleway](https://down.guide/scaleway)
- Level: confirmed
- Impact: Major outage
- lasted 5d 2h
- started 2026-10-21 14:38 UTC
- Hosting, Web Hosting
- id: DWN-9651bf0b7c
- Official page: https://stspg.io/6w05z5ks4sz5

## Updates from Scaleway
### 2026-10-21 14:38 UTC: identified
The PHP project released today a fix for two critical  vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5
As a precaution, we have taken Webhosting websites offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.

### 2026-10-22 06:20 UTC: identified
\[Update\] Security Maintenance – Web Hosting Services
Security patching for the php2shell vulnerability is progressing:
cPanel Environments (Resolved): PHP versions have been updated across all Scaleway and Online.net cPanel servers (as well as Scaleway Plesk). Maintenance mode has been lifted, and services are back online.
Classic Shared Hosting / Mutu (In Progress): Classic shared environments remain under maintenance while work is actively underway.

### 2026-10-26 16:55 UTC: identified
\[Update\] Security Maintenance – Web Hosting Services
Classic Shared Hosting / Mutu (Back online):
Patched PHP versions (5.6, 7.0, 7.1, 7.2 and 7.3) have been fully deployed across all Classic shared hosting environments, and maintenance mode has been lifted. Websites are back online, except PHP 4 which remains in maintenance.
Current behavior per PHP version:
 -PHP 7.x: websites are served normally on their patched PHP version.
 -PHP 5.x: websites previously running PHP 5.2, 5.4 or 5.5 have been automatically migrated to PHP 5.6 (patched) and are served normally. We recommend that customers check that their websites are working correctly after this version change, following the recommendations in this guide: https://www.scaleway.com/en/docs/webhosting/reference-content/php-5-6-migration-guide/
 -PHP 4: websites remain in maintenance and are served a maintenance page. Customers can bring their websites back online by migrating to PHP 5.6 or later.
We apologize for the inconvenience, and thank you for your patience.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).