ChangesHetznerPHP security issues CVE-2026-109618 and CVE-2026-109619
Hetzner: Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619
Summary pending. The diff below shows exactly what changed.
Discussed on Hacker News
- 4 points · 2 comments · posted · posted 29 min before the vendor’s first update
Threads are matched automatically by vendor name and timing; points and comments refresh every 30 minutes. Method and limits.
Incident page: the full timeline of updates
What changed
Struck in red is what Hetzner removed; blue is what they added. Muted text is unchanged context.
Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
Before captured
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
e07f7fb0e4fd5619…After captured
In the 2026-10-28 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
64a0017333f069d4…
History of this incident
Wednesday, October 28
1 incident change
- Normal progressIncident
Incident updatePHP security issues CVE-2026-109618 and CVE-2026-109619this change
Cite this
Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619 on Hetzner’s status page, changed 2026-10-28 16:03 UTC (change 1 of 1).
- Title
- Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619
- Vendor
- Hetzner
- Date
- URL
- https://rewindex.com/change/rc2dd4ed62fa9ae