[23:40 UTC] Completed — The patched PHP versions are deployed on all servers. Maintenance is complete.
[14:00 UTC] In progress — We have started rolling out the patched PHP versions.
Two serious security vulnerabilities nicknamed “php2shell” were disclosed today in PHP (CVE-2026-109618 and CVE-2026-109619). Under certain conditions, they could allow an attacker to take control of a website without needing to log in.
We are therefore rolling out the patched PHP versions to all of our servers as soon as possible. No action is needed on your part — your websites, data and settings stay exactly as they are; we are only updating PHP to a secure version.
Scheduled maintenance window: 21 Oct 2026 14:00 – 22 Oct 2026 02:00 UTC.
Brief interruptions or degraded availability may occur during this window.
