22nd Oct 2026
Security update: PHP vulnerabilities patched across all WP NET servers
On 21 October 2026 the PHP project disclosed two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both could allow an attacker to run code on a web server without logging in. They affect all supported PHP versions.
We have applied the patched PHP releases (8.2.35, 8.3.36, 8.4.27 and 8.5.12) across our entire server fleet, ...
