Proactive PHP Security Notice

We are actively updating our server infrastructure and PHP installations to protect hosted sites against recent critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

The security and performance of your websites remain our highest priority. To ensure complete protection, we have implemented immediate defenses while completing our standard update procedures.

Current Protection & Immediate Mitigations

To safeguard your sites immediately, the following measures are active across our network:

• Web Application Firewall (WAF) Rules: Our WAF is actively filtering traffic and blocking known exploit vectors associated with these vulnerabilities.

• Hardened PHP Configurations: We have disabled the session.upload_progress.enabled directive server-wide as a secondary mitigation layer to neutralize potential attack vectors.

Infrastructure Patch Progress

Our systems administration team is executing phased updates across all supported environments:

• Primary Versions: The most widely used PHP versions on our platforms have already been successfully patched and updated to safe builds.

• Legacy Versions: Older, lesser-used PHP versions are currently being patched or scheduled for deactivation within the next 24 hours.

What This Means for You

No action is required on your part.

All update processes are performed in the background, and we do not anticipate any service interruptions or downtime. Your sites will continue to run normally with enhanced security protections active.

If you have any questions or require custom PHP configuration adjustments, please feel free to reach out to our support team.