Why InvisHosting Was Offline on October 21, 2026
We took InvisHosting offline as a precaution against CVE-2026-109618 and CVE-2026-109619, two critical PHP vulnerabilities. Here is what happened and why your data is safe.
As a file-sharing provider that specialises in privacy, InvisHosting treats every upload as something worth defending. We value your anonymity, we protect against malware attacks, and we design every part of this platform around one principle: your files are yours.
No accounts required. Anonymous uploads, minimal logging, GDPR-respecting defaults.
Every upload quarantined and scanned. Flagged files removed before they reach a single visitor.
Argon2id hashing, strict CSP, rate-limited endpoints, signed sessions, and hardened uploads.
Practical deep-dives on the threats we see and the defenses we ship.
We took InvisHosting offline as a precaution against CVE-2026-109618 and CVE-2026-109619, two critical PHP vulnerabilities. Here is what happened and why your data is safe.