Overview
On October 21, 2026, the PHP development team released urgent security updates addressing two critical vulnerabilities: CVE-2026-109618 and CVE-2026-109619. PHP powers websites and applications across the internet, making these updates important for organizations running affected versions.
What are the vulnerabilities?
Both issues can allow unauthenticated remote code execution on vulnerable PHP installations. In practical terms, successful exploitation could let an attacker execute malicious instructions on an affected server.
The disclosure does not mean that every PHP website has been compromised. It does mean that administrators of affected PHP installations should apply the appropriate security updates promptly.
How we responded
Following the advisory, our engineering team reviewed the PHP runtime on a managed hosting server and updated it to the security-patched PHP 8.4.27 release.
On October 22, 2026, we verified that:
- The patched PHP version was installed successfully.
- The PHP processing service was active.
- PHP-FPM configuration validation completed successfully.
- Nginx configuration syntax validation completed successfully.
These checks confirm remediation of the identified PHP 8.4 runtime. They do not constitute a comprehensive security assessment of every application or hosting environment.
What this means for customers
No customer action is required for this specific server-level update where websites use the updated PHP environment we manage. Infrastructure maintenance is handled as part of our fully managed hosting service.
Customers who run independently managed PHP environments should check their PHP versions and apply the relevant security updates. Application frameworks, themes, plugins, and other components also need ongoing maintenance.
Our continuing commitment
Reliable hosting involves more than keeping a website online. It requires attention to security advisories, timely infrastructure maintenance, and clear communication when important issues arise. We remain committed to these responsibilities as we support our customers.
