Critical PHP Security Update
Following the PHP security release dated 21/10/26, we have identified and patched or mitigated all of our applications. As part of our response, we also monitored web traffic and implemented protections across our web application firewalls to help detect and block malicious activity.
SECURITY ADVISORY · CVE-2026-109618 | CVE-2026-109619
Critical PHP Security Update: Is your website affected?
Two critical vulnerabilities in PHP were disclosed on 21 October, and fixes are available now. Our team will check whether your websites and web apps are affected, help you fix anything that needs attention and make sure you’re secure afterwards.
