Critical security vulnerabilities affecting PHP

Update timeline

1. investigating Oct 21, 2026, 10:15 PM UTC

   We’re currently investigating reports of a potential service interruption with the listed services.
We apologise for any inconvenience and will update you as soon as we learn more. Symptoms: We are aware of two recently disclosed critical security vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities have the potential to allow unauthorised access to affected systems and pose a significant security risk. We are working to implement the necessary security updates and mitigations as a matter of priority. Recommended user actions: As part of these remediation efforts, some services may need to be temporarily taken offline to ensure the vulnerabilities can be addressed safely and effectively. We understand the importance of service availability and will make every effort to minimise disruption. Any affected services will be restored as soon as it is safe and practical to do so. Protecting the security and integrity of our customers' services remains a top priority, and we appreciate your patience and understanding while this important work is undertaken. Should you have any questions or concerns, please contact your Account Manager.

2. investigating Oct 27, 2026, 01:13 AM UTC

   We’re currently investigating reports of a potential service interruption with the listed services.
We apologise for any inconvenience and will update you as soon as we learn more. Symptoms: We are aware of two recently disclosed critical security vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities have the potential to allow unauthorised access to affected systems and pose a significant security risk. We are working to implement the necessary security updates and mitigations as a matter of priority. Recommended user actions: You may notice a brief interruption to services during this time, but we expect any disruption to be minimal

3. investigating Oct 27, 2026, 01:16 AM UTC

   We’re currently investigating reports of a potential service interruption with the listed services.
We apologise for any inconvenience and will update you as soon as we learn more. Symptoms: We are aware of two recently disclosed critical security vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities have the potential to allow unauthorised access to affected systems and pose a significant security risk. We are working to implement the necessary security updates and mitigations as a matter of priority. Recommended user actions: You may notice a brief interruption to services during this time, but we expect any disruption to be minimal.

4. identified Oct 27, 2026, 01:19 AM UTC

   We’re experiencing a service outage with the listed services.
We apologise for any inconvenience and will provide further updates as we work to restore normal service. Symptoms: We are aware of two recently disclosed critical security vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities have the potential to allow unauthorised access to affected systems and pose a significant security risk. We are working to implement the necessary security updates and mitigations as a matter of priority. Recommended user actions: You may notice a brief interruption to services during this time, but we expect any disruption to be minimal.

5. identified Oct 27, 2026, 01:21 AM UTC

   We’re experiencing a service outage with the listed services.
We apologise for any inconvenience and will provide further updates as we work to restore normal service. Symptoms: We are rolling out a security fix across affected hosting servers to mitigate two PHP vulnerabilities and help protect your websites and applications. Recommended user actions: You may notice a brief interruption to services during this time, but we expect any disruption to be minimal.