We are aware of two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) with patches expected from PHP on October 21 at 14:00 UTC. We will patch all systems as soon as the fix is released. Early reports indicate all PHP versions are affected, but only PHP 8.2–8.5 will receive a patch. If any of your sites run an older PHP version, please switch them to PHP 8.2 or newer now. Read the full update on our status page.
https://status.fullhost.com/cmvhc0ns101ew1oplp3551ej5
