PHP CVE ISSUE
ResolvedAll PHP versions are currently updated.
Managing domain names is possible once again.
The PHP updates on our web servers may take a few more hours to complete. See: https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5
Managing domain names is temporarily unavailable.
We are currently awaiting an update for alt-php for our web servers. The mirrors (update servers) are experiencing some issues because everyone is trying to update at the same time. We are working hard on this and expect everything to be up to date within half an hour!
PHP has released an update. UPDATE YOUR PHP AS SOON AS POSSIBLE.
Naturally, we are updating our own servers immediately.
For our web servers:
Thanks to Imunify360, we have already implemented a (temporary) fix for all web hosting clients.
Naturally, we will update PHP once a new version becomes available.
On 20 October 2026, two critical vulnerabilities in PHP were disclosed (CVE-2026-109618 and CVE-2026-109619). PHP is the programming language that powers many websites and web applications. These vulnerabilities could allow an attacker to remotely execute code on affected servers.
We are aware of the issue and are closely monitoring the situation. Our systems have been reviewed and, where possible, we have already taken additional protective measures. As soon as the official PHP security update is available, we will install it on all our systems as a priority.
To our knowledge, there has been no misuse of our systems. No action is required on your part. Security is always our highest priority, and we are doing everything we can to protect your data and our services.
If you have any questions, please don’t hesitate to contact us.