Critical PHP Vulnerabilities – Mitigation and Patching Underway

Update timeline

1. investigating Oct 21, 2026, 07:56 AM UTC

   We are aware of reports of critical vulnerabilities affecting PHP that may pose a security risk to websites and applications running affected versions. Our team has implemented initial mitigation measures across the Web Hosting estate to help reduce potential exposure. We are actively monitoring the situation and preparing to apply the relevant security patches as soon as they become available. We will continue to assess the risk, review available mitigations, and take appropriate action to protect our services. While the initial mitigations provide an additional layer of protection, they should not be considered a complete fix. We will update this status page as further information becomes available and as additional mitigation and patching measures are implemented. Update 16:00 UK Time: Patches have been released and we will be rolling this out with our platform teams as soon as possible.

2. investigating Oct 21, 2026, 07:56 AM UTC

   We are aware of reports of critical vulnerabilities affecting PHP that may pose a security risk to websites and applications running affected versions. Our team has implemented initial mitigation measures across the eXtend estate to help reduce potential exposure. We are actively monitoring the situation and preparing to apply the relevant security patches as soon as they become available. We will continue to assess the risk, review available mitigations, and take appropriate action to protect our services. While the initial mitigations provide an additional layer of protection, they should not be considered a complete fix. We will update this status page as further information becomes available and as additional mitigation and patching measures are implemented.

3. resolved Oct 22, 2026, 09:04 AM UTC

   Our teams have confirmed that all hosting platforms (StackCP and reseller cPanel) have had the available patches applied, and is now mitigated. We will continue to monitor the situation and provide updates if needed.