PHP Security Vulnerability - Shared Hosting and Managed Servers Patched

A security vulnerability in PHP was announced on Tuesday 21 October 2026.

All of our shared hosting servers and fully-managed servers running PHP 8.1 to 8.5 were patched on the same day, within 20 minutes of the fixes being released. You do not need to do anything.

Our shared hosting does not run any end-of-life versions of PHP, so every version available on shared hosting has been patched.

If you have a dedicated hardware firewall from us, the firewall has also been patched. You do not need to do anything.

If your server is self-managed, please check the PHP versions installed on it and update them to the latest release as soon as possible.

If your fully-managed server is running an older version of PHP that has no fix available, we have already contacted you separately