hosting
Namecheap Shared Hosting: security status
Summary
Official status post (posted Oct 21, resolved): mitigations on all platforms on Oct 21, then CloudLinux's fixed packages rolled out to reseller and shared servers, with "the maintenance have finished" at 16:50 UTC on Oct 22. An undated final update says the fixes are installed on all Shared Hosting servers: PHP 8.2-8.5 now show the fixed numbers (8.2.35/8.3.36/8.4.27/8.5.12), 5.2-8.1 keep their version numbers but carry the fix, and "All PHP versions offered on our Shared Hosting servers are patched".
Customer action:
No action is needed for this fix. PHP 5.2-8.1 are patched even though the version number does not change. PHP 8.1 and older are out of upstream support, so plan a move to a supported PHP in cPanel (Select PHP Version).
Source: https://www.namecheap.com/status-updates/ongoing-php-security-vulnerability-affecting-hosting-services-october-21-2026/
Verified: 2026-10-26
Shared (Stellar) and reseller cPanel hosting on CloudLinux and LiteSpeed. Its servers are named serverNNN / premiumNNN / businessNNN.web-hosting.com. Sites whose DNS stays at registrar-servers.com or another DNS host show as Namecheap. EasyWP is a separate product and is not covered by the cited notice.
How this tool recognises the provider
- AS numbers
AS22612- Name servers
*.namecheaphosting.com