hosting

SAKURA internet: security status

patchedofficial notice · 2026-10-23

Summary

Official (addendum Oct 23 17:30): all emergency maintenance for this vulnerability has ended. Rental server and managed server: every PHP version selectable in the control panel (8.3/8.2/8.1/8.0/7.4/5.6/5.4/5.3/5.2 per the support notice) is fixed, including the EOL versions still offered. The notices do not say whether the version string changes. Sakura VPS does not use PHP in the service itself; customers running PHP on a VPS are told to update. Sakura Cloud: required work done, some features still suspended.

Customer action:

Rental server customers: no urgent action. Because EOL PHP may have new flaws later, Sakura recommends moving to a supported PHP. If you run PHP yourself on VPS or cloud, update it yourself.

Source: https://www.sakura.ad.jp/corporate/information/announcements/2026/10/22/1968226117/
Verified: 2026-10-24

Covers rental server, VPS and cloud. On VPS and cloud the customer runs PHP; the provider's patch status applies to the rental server only.

How this tool recognises the provider

AS numbers: AS9370AS9371
Text in the AS name: SAKURA
Name servers: *.dns.ne.jp

Report a correction (GitHub)