PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
- Investigating (done)
- Identified (done)
- Monitoring
- Resolved
- Started
- Status
- Monitoring
- Related services
- Website hosting
This is an advisory: it does not change the status of our services.
Updates
The security fixes are now in place on our hosting platforms, including older PHP versions. No action is needed from you, and there's no need to change your website's PHP version.
The PHP version number your website reports won't change: the fix is applied to the version you already have.
Two critical security vulnerabilities have been announced in PHP, the software most of our hosted websites run on (CVE-2026-109618 and CVE-2026-109619).
We're applying the security fixes across our hosting platforms. You don't need to do anything.