Please be aware that PHP updates will not reflect the PHP versions shown on PHP.net or published widely online.
This is due to a process called backporting, where the patches to correct the issue are applied to the current version of PHP. This is designed to ensure that only the fixes for the specific issue are applied, without introducing other changes or updates.
The update rollout is now complete. All available updates have been applied.
Update rollout is now commencing. Due to the volume of updates that have to be applied, we expect this to take some time.
Our teams continue to apply updates once they become available from software vendors. At this time we are awaiting updates to be published by CloudLinux. The ETA given for this is approx. 0100 BST (1200 UTC)
Mitigations remain in place, including WAF rules.
Mitigations - where available - are in place and as updates become available these are being applied.
Our teams are currently responding to PHP CVE-2026-109618 / CVE-2026-109619.
This involves applying mitigations and updates across our platforms.
Some of these mitigations may change PHP behaviour which in turn may cause behavioural changes in applications. Our apologies to any customers impacted by these changes, which are necessary to preserve security of your services.
Our support teams are on hand to assist with any queries you may have, please contact us in the usual way.