Security Notice: Critical PHP2Shell Vulnerability

We are aware of the disclosed critical vulnerability in PHP, “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619). It affects the PHP engine itself and impacts most PHP versions released over the last decade.

The PHP project released security updates on October 21, and we have applied them across our servers.
We’ll be emailing customers with full details and recommendations.

Sites that don’t use PHP, such as ASP.NET-only sites, are not affected.

If you have questions in the meantime, please contact our support team.