PHP security maintenance (CVE-2026-109618 and CVE-2026-109619)

Preventive measures and PHP update on all servers in response to two critical vulnerabilities. No service interruptions and nothing for you to do. More information: hostsuar.com/en/news/critical-php-vulnerabilities-october-2026

Web hosting Since 21/10/2026 06:49 until 21/10/2026 23:59

Updates

Everything we have shared, from the most recent to the first.

Finished 21/10/2026 23:59

The fix is installed on all servers and in every PHP version, from 5.2 to 8.5. There were no service interruptions and you don't need to do anything.
In progress 21/10/2026 16:00

PHP has released the official fix. We are starting to install the patched versions published by CloudLinux on all servers as they become available.
In progress 21/10/2026 06:49

Following the first reports of two critical PHP vulnerabilities, we applied preventive measures on all servers: we disabled session upload progress tracking in every PHP version, from 5.2 to 8.5, and added our own web firewall rules that reject known exploit attempts before they reach PHP.

Something not working and not listed here?

This page covers one specific notice. If your website or your email is failing for another reason, check the service status or tell us and we will look into it.

Service status Get in touch