cloud (IaaS)
Hetzner: security status
Summary
Cloud and dedicated servers are IaaS: the customer runs PHP (Hetzner says it will email those customers separately). For Hetzner-run Webhosting and Managed Servers, the status page (updated Oct 22 04:32 UTC) says patches were deployed on all servers for PHP 7.4 and 8.0-8.5 at 17:50 UTC on Oct 21 and for 5.6 and 7.3 at 04:32 UTC on Oct 22. It does not say whether version strings changed.
Customer action:
Webhosting and Managed Server customers are told to monitor for suspicious activity. Cloud and dedicated server customers must update PHP or OS packages themselves (ask your administrator).
Source: https://status.hetzner.com/incident/f4144d55-38c3-48d1-8664-7a3429355cd7
Verified: 2026-10-24
Covers Webhosting, Managed Server, Cloud and dedicated servers. On Cloud and dedicated servers the customer runs PHP; the provider's patch status applies to Webhosting and Managed Servers only.
How this tool recognises the provider
- AS numbers
AS24940- Text in the AS name
HETZNER- Name servers
*.ns.hetzner.com*.ns.hetzner.de*.your-server.de*.second-ns.com*.second-ns.de*.first-ns.de