We have applied the security patch for the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 to all supported PHP versions across our hosting servers. No action is needed to receive the fix.
We recommend to upgrade your PHP version to 8.2 or higher if you are using lower PHP version.
Your site may still show the same PHP version number, for example 8.4.26. The fix is delivered as an updated build of the existing release, so the number may not change.
To confirm, check the Build Date in your site's phpinfo page. A date of 21 October 2026 or later means the site is on the patched build. If you see an earlier date on any of your sites, open a support ticket with the website address.
cPanel advisory: https://support.cpanel.net/hc/en-us/articles/44397389677335-Critical-PHP-Security-Release-CVE-2026-109618-and-CVE-2026-109619
حمعه, اکتبر 23, 2026
