All affected PHP packages on our hosting servers have been patched against the recently disclosed critical vulnerabilities CVE-2026-109618 and CVE-2026-109619.
Additional security mitigations were already in place before patching was completed, providing protection while permanent fixes were rolled out.
No action is required from hosting clients at this stage.
More about the vulnerability can be viewed here: https://www.php.net/archive/2026.php