Critical PHP Vulnerabilities Discovered
We would like to inform you about recently identified PHP security vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619 (PHP2Shell).
These vulnerabilities pose a potential security risk to servers running affected PHP versions. Under certain conditions, successful exploitation could allow attackers to execute malicious code remotely, gain unauthorized access to sensitive data, or disrupt web applications.
What Do We Recommend?
To help protect your projects and infrastructure, we recommend the following:
1. Check the PHP versions installed on your servers.
2. Apply the latest available PHP security updates.
3. Whenever possible, discontinue the use of outdated and unsupported PHP versions.
4. Update your CMS, plugins, and other web application components.
5. Review your servers for suspicious activity.
Information for VPS/VDS Customers
Please note that VPS/VDS services are provided on a self-managed basis.
Customers are responsible for maintaining and updating their operating systems, PHP installations, and other software running on their virtual servers.
IPHOSTER does not automatically install software updates inside customer-managed virtual machines.
Need Assistance?
If you have questions about your installed PHP version or need guidance on updating your software, please contact our technical support team.
We recommend applying security updates promptly and regularly reviewing the software versions used across your infrastructure.
Thank you for your attention to security!
The IPHOSTER Team