22 October 2026 at 18:30
Two critical PHP security vulnerabilities (PHP2Shell) were disclosed yesterday.
We completed the installation of security patches across our web hosting services by 7:00 AM to prevent these vulnerabilities from being exploited. We had already implemented temporary protective measures before the official patches became available and installed the patches as soon as they were released. We continue to monitor the situation closely.
Impact on customers
The issue has now been resolved, and no action is required from our web hosting customers.
Our customers do not need to install any updates or take any other action, as we have applied the patches centrally. During the installation, websites may have experienced brief service disruptions.
Why hasn’t the PHP version number changed?
We received the PHP security patches directly from our software vendor, CloudLinux. These patches do not change the PHP version numbers, so the displayed version remains the same as before the update.
As a result, a server may still display an older PHP version number even though the security vulnerabilities have been fixed.
Need help?
Please contact our customer support team if you would like to confirm that the security patches have been applied to your website’s PHP environment or if you have any questions.
If you manage your own server (unmanaged server), you must install the security updates yourself. Update PHP to version 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or later versions), or install the patched package provided by your operating system vendor.