PHP Security Update – CVE-2026-109618 and CVE-2026-109619

Current status as of 21 October 2026, 17:20 (CEST)

We are preparing to deploy patched versions of PHP 8.2–8.5 on our shared web hosting services to address newly discovered security vulnerabilities.

The preparation of patched images is expected to be completed within tens of minutes of the patches being released. However, deployment to the production environment may take several hours.

Current status as of 21 October 2026, 19:40 (CEST)

The security update of PHP 8.5 to the patched version 8.5.12 has been successfully completed. This version includes fixes for the reported security vulnerabilities.

The update was performed automatically by FORPSI. Customers using PHP 8.5 do not need to take any action or make any changes to their web hosting settings.

We will continue to provide updates on the progress of security updates for other PHP versions.