Update – October 22, 2026: All FullHost-managed servers were patched against CVE-2026-109618 and CVE-2026-109619 on October 21. If your PHP version number appears unchanged, your site is still patched – the fix was backported by CloudLinux, which keeps the existing version number. For the full details, please see the status page:
https://status.fullhost.com/cmvhc0ns101ew1oplp3551ej5