# Hetzner: Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619

> Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619. Detected 2026-10-28 by Rewindex: what changed on Hetzner’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/rc2dd4ed62fa9ae
Last updated: 2026-10-28T16:03:33Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-28 16:03 UTC · Detected: 2026-10-28 16:03 UTC
- [Source: https://status.hetzner.com/incident/f4144d55-38c3-48d1-8664-7a3429355cd7](https://status.hetzner.com/incident/f4144d55-38c3-48d1-8664-7a3429355cd7)
- [Company: Hetzner](https://rewindex.com/company/hetzner.md)
- Versions: before incident\_version:85/f4144d55-38c3-48d1-8664-7a3429355cd7@d6a0c5a35d25 → after incident\_version:85/f4144d55-38c3-48d1-8664-7a3429355cd7@8f76676072f0
- Change 1 of 1 for this incident

## Discussed on Hacker News

- [Hetzner Outage](https://news.ycombinator.com/item?id=50178645): 4 points, 2 comments, posted 2026-10-21 10:35 UTC, posted 29 min before the vendor’s first update

Incident page (full timeline): [PHP security issues CVE-2026-109618 and CVE-2026-109619](https://rewindex.com/company/hetzner/incidents/f4144d55-38c3-48d1-8664-7a3429355cd7.md)
## What changed

**1. Changed: Status**

```diff
- investigating
+ resolved
```

**2. Added: Resolved time**

```diff
+ 2026-10-28 16:03 UTC
```

**3. Added: Update** (resolved) · 2026-10-28 16:03 UTC

```diff
+ No longer listed in the status feed.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-28 16:03 UTC | Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619 (this change) | Normal progress |

All Hetzner changes: [timeline](https://rewindex.com/company/hetzner/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619 on Hetzner’s status page, changed 2026-10-28 16:03 UTC (change 1 of 1).

- Canonical URL: https://rewindex.com/change/rc2dd4ed62fa9ae
- Citation: Hetzner, “Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619” (2026-10-28 16:03 UTC). Archived by Rewindex: https://rewindex.com/change/rc2dd4ed62fa9ae (CC BY 4.0).
- Markdown link: `[Hetzner: Incident updated: PHP security issues CVE-2026-109618 and CVE-2026-109619 (2026-10-28)](https://rewindex.com/change/rc2dd4ed62fa9ae)`


---
Canonical: https://rewindex.com/change/rc2dd4ed62fa9ae · Markdown: https://rewindex.com/change/rc2dd4ed62fa9ae.md · JSON: https://rewindex.com/api/v1/changes/rc2dd4ed62fa9ae · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-11T04:20:48.173Z