[Update] Security Maintenance – Web Hosting Services Classic Shared Hosting / Mutu (Back online): Patched PHP versions (5.6, 7.0, 7.1, 7.2 and 7.3) have been fully deployed across all Classic shared hosting environments, and maintenance mode has been lifted. Websites are back online, except PHP 4 which remains in maintenance. Current behavior per PHP version: -PHP 7.x: websites are served normally on their patched PHP version. -PHP 5.x: websites previously running PHP 5.2, 5.4 or 5.5 have been automatically migrated to PHP 5.6 (patched) and are served normally. We recommend that customers check that their websites are working correctly after this version change, following the recommendations in this guide: https://www.scaleway.com/en/docs/webhosting/reference-content/php-5-6-migration-guide/ -PHP 4: websites remain in maintenance and are served a maintenance page. Customers can bring their websites back online by migrating to PHP 5.6 or later. We apologize for the inconvenience, and thank you for your patience.

[Update] Security Maintenance – Web Hosting Services Security patching for the php2shell vulnerability is progressing: cPanel Environments (Resolved): PHP versions have been updated across all Scaleway and Online.net cPanel servers (as well as Scaleway Plesk). Maintenance mode has been lifted, and services are back online. Classic Shared Hosting / Mutu (In Progress): Classic shared environments remain under maintenance while work is actively underway.

The PHP project released today a fix for two critical  vulnerabilities allowing unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619, CVSS 9.2 — no complete mitigation exists): https://www.php.net/archive/2026.php#2026-10-21-5 As a precaution, we have taken Webhosting websites offline while we apply the patched PHP versions. Our team is actively working to patch and restore the service as soon as possible.