Today, 21 October 2026, the PHP developers released fixes for two critical security vulnerabilities. Our technical team is already deploying the updates to all our servers.
If you use hosting with us, we will handle the installation of the fixes. No action is required on your part.
What the vulnerabilities relate to
The disclosed vulnerabilities could allow an attacker to remotely execute their own code on the server, even without logging in. These are flaws in PHP itself, not in a specific CMS or application.
That is why we are prioritizing these fixes. We are updating the server environment in which your websites and applications run to secure them against these vulnerabilities.
PHP 7.4 and older versions
PHP versions older than 7.4 no longer have standard security support directly from the PHP developers. For these versions, it is therefore not possible to rely on the usual release of patch versions.
If your website still uses PHP 5.6 or 7.1, we recommend upgrading to a higher version. However, before upgrading, it is necessary to verify in advance the compatibility of your application with the new PHP version.
If you have any questions about the situation, please do not hesitate to contact our support.
You can find technical details in the official PHP security announcement.