We are continuing to update our PHP installations to protect against the recent critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
99% of hosted web-sites are now using updated or patched PHP versions.
The updating process is taking longer than first anticipated, we expect this to be complete within the next 24 hours.
Our Web Application Firewall and configuration changes ensure the unpatched installations are secure against currently known exploits.
We are actively updating our PHP installations to protect against the recent critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
Current Protection & Mitigations:
WAF Protection: Our Web Application Firewall is actively mitigating known exploit attempts to protect your websites.
PHP Configuration: We have disabled the session.upload_progress.enabled setting as an immediate secondary mitigation layer.
Update Progress:
The most widely used PHP versions have already been successfully updated or patched.
Older, lesser-used PHP versions are being patched and will be completed within the next 24 hours.
Action Required:
No action is required from you, and we do not anticipate any downtime during these updates.
Yellow | BPWEB | 
October 22, 2026 8:48 pm | 
Comments (0) 
Subscribe