Liquid Web - Services Status

Monitoring: The security updates for CVE-2026-109618 and CVE-2026-109619 have been rolled out across our hosting fleet. Our teams continue to monitor the environment.

If your site uses an end-of-life PHP version (PHP 8.1 or older), we strongly recommend moving it to PHP 8.2 or newer. Some older PHP versions no longer receive security fixes from their vendors.

To check which PHP version your site is running, see: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you have questions about your server, please contact our Support team.

Identified: Updates are continuing to roll out across our hosting fleet

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: We are continuing to monitor patch deployment across our hosting fleets.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL): 8.1.34 (built on 21 Oct 2026) PHP 8.0 (EOL): 8.0.30 (built on 21 Oct 2026) PHP 7.4 (EOL): 7.4.33 (built on 21 Oct 2026) Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

InterWorx PHP builds

Control panel PHP

IW6 (EL6, EL7) iworxphp72-php: 7.2.34-114

IW7 (EL7, EL8) iworxphp72-php: 7.2.34-114

IW8 (EL8, EL9) iworxphp82-php: 8.2.35-4

Customer PHP, iworx builds

php56: 5.6.40-47.2 (EL6, EL7) php70: 7.0.33-47.2 (EL6, EL7) php71: 7.1.33-34.2 (EL6, EL7) php72: 7.2.34-29.3 (EL6, EL7) php73: 7.3.33-22.2 (EL6, EL7) php74: 7.4.33-29.3 (EL7) php80: 8.0.30-19.3 (EL7) php81: 8.1.34-5.3 (EL7) php82: 8.2.35-1.3 (EL7) php83: 8.3.36-1.2 (EL7)

Customer PHP, system packages (EL7)

php-system: 8.3.36-1.1 php-system-centos54: 5.4.16-48.1 php-system-remi54: 5.4.45-19.1 php-system-remi55: 5.5.38-13.1 php-system-remi56: 5.6.40-41.1 php-system-remi70: 7.0.33-42.1 php-system-remi71: 7.1.33-29.1 php-system-remi72: 7.2.34-29.1 php-system-remi73: 7.3.33-22.1 php-system-remi74: 7.4.33-31.1 php-system-remi80: 8.0.30-21.1 php-system-remi81: 8.1.34-6.1 php-system-remi82: 8.2.35-1.1

Customer PHP, Remi upstream (EL8, EL9)

php85: 8.5.12 php84: 8.4.27 php83: 8.3.36 php82: 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: The security patch deployment is progressing well across the affected environments. Our teams are continuing to work toward completing the deployment and ensuring the security of the impacted services.

We will provide further updates as more information becomes available.

Identified: The Patch deployment is underway across affected environments with good progress. We will share another update as soon as more information is available.

Thank you for your understanding and patience.

Identified: Patch deployment continues across the affected hosting environments. Our Security and Engineering teams are monitoring the rollout to ensure successful deployment and maintain service stability.

We will continue to provide updates as progress is made.

Thank you for your patience.

Identified: Patch deployment is ongoing across our fleet. We appreciate your continued patience.

Identified: We are continuing to work on a fix for this issue.

Identified: Our Security and Engineering teams continue to assess the remaining hosting environments and verify the deployment of security updates. The rollout is progressing in stages, with teams monitoring systems to help maintain service stability. We will continue to monitor progress and share further updates as more information becomes available. To check the PHP version currently running on your site, please refer to this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: Our Security and Engineering teams are continuing to deploy and verify security updates across our hosting environments. The work is progressing in stages, and teams are monitoring systems throughout the rollout to help maintain service stability.

We are continuing to assess the remaining environments and will share further updates as patching progresses. To check the PHP version currently running on your site, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have concerns, please contact our Support team.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1.34-5 (Vendor backport) PHP 8.0.30-12 (Vendor backport) PHP 7.4.33-19 (Vendor backport)

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

Customers using cPanel/WHM can patch PHP Versions 8.5, 8.4, 8.3, 8.2, along with the backported versions 8.1, 8.0 and 7.4 by performing a cPanel update and the running a yum update.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

We are currently analyzing the security releases and testing deployment paths in our staging environments to ensure service stability. At this time, no patches or modifications have been rolled out to production systems.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution.

Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available.

We are continuing to closely monitor the situation and will provide further updates as additional information becomes available.

If you need assistance or have any concerns, please contact our Support team.

Monitoring: The security updates for CVE-2026-109618 and CVE-2026-109619 have been rolled out across our hosting fleet. Our teams continue to monitor the environment.

If your site uses an end-of-life PHP version (PHP 8.1 or older), we strongly recommend moving it to PHP 8.2 or newer. Some older PHP versions no longer receive security fixes from their vendors.

To check which PHP version your site is running, see: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you have questions about your server, please contact our Support team.

Identified: Updates are continuing to roll out across our hosting fleet

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: We are continuing to monitor patch deployment across our hosting fleets.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL): 8.1.34 (built on 21 Oct 2026) PHP 8.0 (EOL): 8.0.30 (built on 21 Oct 2026) PHP 7.4 (EOL): 7.4.33 (built on 21 Oct 2026) Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

InterWorx PHP builds

Control panel PHP

IW6 (EL6, EL7) iworxphp72-php: 7.2.34-114

IW7 (EL7, EL8) iworxphp72-php: 7.2.34-114

IW8 (EL8, EL9) iworxphp82-php: 8.2.35-4

Customer PHP, iworx builds

php56: 5.6.40-47.2 (EL6, EL7) php70: 7.0.33-47.2 (EL6, EL7) php71: 7.1.33-34.2 (EL6, EL7) php72: 7.2.34-29.3 (EL6, EL7) php73: 7.3.33-22.2 (EL6, EL7) php74: 7.4.33-29.3 (EL7) php80: 8.0.30-19.3 (EL7) php81: 8.1.34-5.3 (EL7) php82: 8.2.35-1.3 (EL7) php83: 8.3.36-1.2 (EL7)

Customer PHP, system packages (EL7)

php-system: 8.3.36-1.1 php-system-centos54: 5.4.16-48.1 php-system-remi54: 5.4.45-19.1 php-system-remi55: 5.5.38-13.1 php-system-remi56: 5.6.40-41.1 php-system-remi70: 7.0.33-42.1 php-system-remi71: 7.1.33-29.1 php-system-remi72: 7.2.34-29.1 php-system-remi73: 7.3.33-22.1 php-system-remi74: 7.4.33-31.1 php-system-remi80: 8.0.30-21.1 php-system-remi81: 8.1.34-6.1 php-system-remi82: 8.2.35-1.1

Customer PHP, Remi upstream (EL8, EL9)

php85: 8.5.12 php84: 8.4.27 php83: 8.3.36 php82: 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: The security patch deployment is progressing well across the affected environments. Our teams are continuing to work toward completing the deployment and ensuring the security of the impacted services.

We will provide further updates as more information becomes available.

Identified: The Patch deployment is underway across affected environments with good progress. We will share another update as soon as more information is available.

Thank you for your understanding and patience.

Identified: Patch deployment continues across the affected hosting environments. Our Security and Engineering teams are monitoring the rollout to ensure successful deployment and maintain service stability.

We will continue to provide updates as progress is made.

Thank you for your patience.

Identified: Patch deployment is ongoing across our fleet. We appreciate your continued patience.

Identified: We are continuing to work on a fix for this issue.

Identified: Our Security and Engineering teams continue to assess the remaining hosting environments and verify the deployment of security updates. The rollout is progressing in stages, with teams monitoring systems to help maintain service stability. We will continue to monitor progress and share further updates as more information becomes available. To check the PHP version currently running on your site, please refer to this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: Our Security and Engineering teams are continuing to deploy and verify security updates across our hosting environments. The work is progressing in stages, and teams are monitoring systems throughout the rollout to help maintain service stability.

We are continuing to assess the remaining environments and will share further updates as patching progresses. To check the PHP version currently running on your site, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have concerns, please contact our Support team.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1.34-5 (Vendor backport) PHP 8.0.30-12 (Vendor backport) PHP 7.4.33-19 (Vendor backport)

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

Customers using cPanel/WHM can patch PHP Versions 8.5, 8.4, 8.3, 8.2, along with the backported versions 8.1, 8.0 and 7.4 by performing a cPanel update and the running a yum update.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

We are currently analyzing the security releases and testing deployment paths in our staging environments to ensure service stability. At this time, no patches or modifications have been rolled out to production systems.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution.

Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available.

We are continuing to closely monitor the situation and will provide further updates as additional information becomes available.

If you need assistance or have any concerns, please contact our Support team.

Monitoring: The security updates for CVE-2026-109618 and CVE-2026-109619 have been rolled out across our hosting fleet. Our teams continue to monitor the environment.

If your site uses an end-of-life PHP version (PHP 8.1 or older), we strongly recommend moving it to PHP 8.2 or newer. Some older PHP versions no longer receive security fixes from their vendors.

To check which PHP version your site is running, see: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you have questions about your server, please contact our Support team.

Identified: Updates are continuing to roll out across our hosting fleet

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: We are continuing to monitor patch deployment across our hosting fleets.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL): 8.1.34 (built on 21 Oct 2026) PHP 8.0 (EOL): 8.0.30 (built on 21 Oct 2026) PHP 7.4 (EOL): 7.4.33 (built on 21 Oct 2026) Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

InterWorx PHP builds

Control panel PHP

IW6 (EL6, EL7) iworxphp72-php: 7.2.34-114

IW7 (EL7, EL8) iworxphp72-php: 7.2.34-114

IW8 (EL8, EL9) iworxphp82-php: 8.2.35-4

Customer PHP, iworx builds

php56: 5.6.40-47.2 (EL6, EL7) php70: 7.0.33-47.2 (EL6, EL7) php71: 7.1.33-34.2 (EL6, EL7) php72: 7.2.34-29.3 (EL6, EL7) php73: 7.3.33-22.2 (EL6, EL7) php74: 7.4.33-29.3 (EL7) php80: 8.0.30-19.3 (EL7) php81: 8.1.34-5.3 (EL7) php82: 8.2.35-1.3 (EL7) php83: 8.3.36-1.2 (EL7)

Customer PHP, system packages (EL7)

php-system: 8.3.36-1.1 php-system-centos54: 5.4.16-48.1 php-system-remi54: 5.4.45-19.1 php-system-remi55: 5.5.38-13.1 php-system-remi56: 5.6.40-41.1 php-system-remi70: 7.0.33-42.1 php-system-remi71: 7.1.33-29.1 php-system-remi72: 7.2.34-29.1 php-system-remi73: 7.3.33-22.1 php-system-remi74: 7.4.33-31.1 php-system-remi80: 8.0.30-21.1 php-system-remi81: 8.1.34-6.1 php-system-remi82: 8.2.35-1.1

Customer PHP, Remi upstream (EL8, EL9)

php85: 8.5.12 php84: 8.4.27 php83: 8.3.36 php82: 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: The security patch deployment is progressing well across the affected environments. Our teams are continuing to work toward completing the deployment and ensuring the security of the impacted services.

We will provide further updates as more information becomes available.

Identified: The Patch deployment is underway across affected environments with good progress. We will share another update as soon as more information is available.

Thank you for your understanding and patience.

Identified: Patch deployment continues across the affected hosting environments. Our Security and Engineering teams are monitoring the rollout to ensure successful deployment and maintain service stability.

We will continue to provide updates as progress is made.

Thank you for your patience.

Identified: Patch deployment is ongoing across our fleet. We appreciate your continued patience.

Identified: We are continuing to work on a fix for this issue.

Identified: Our Security and Engineering teams continue to assess the remaining hosting environments and verify the deployment of security updates. The rollout is progressing in stages, with teams monitoring systems to help maintain service stability. We will continue to monitor progress and share further updates as more information becomes available. To check the PHP version currently running on your site, please refer to this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: Our Security and Engineering teams are continuing to deploy and verify security updates across our hosting environments. The work is progressing in stages, and teams are monitoring systems throughout the rollout to help maintain service stability.

We are continuing to assess the remaining environments and will share further updates as patching progresses. To check the PHP version currently running on your site, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have concerns, please contact our Support team.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1.34-5 (Vendor backport) PHP 8.0.30-12 (Vendor backport) PHP 7.4.33-19 (Vendor backport)

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

Customers using cPanel/WHM can patch PHP Versions 8.5, 8.4, 8.3, 8.2, along with the backported versions 8.1, 8.0 and 7.4 by performing a cPanel update and the running a yum update.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

We are currently analyzing the security releases and testing deployment paths in our staging environments to ensure service stability. At this time, no patches or modifications have been rolled out to production systems.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution.

Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available.

We are continuing to closely monitor the situation and will provide further updates as additional information becomes available.

If you need assistance or have any concerns, please contact our Support team.

Monitoring: The security updates for CVE-2026-109618 and CVE-2026-109619 have been rolled out across our hosting fleet. Our teams continue to monitor the environment.

If your site uses an end-of-life PHP version (PHP 8.1 or older), we strongly recommend moving it to PHP 8.2 or newer. Some older PHP versions no longer receive security fixes from their vendors.

To check which PHP version your site is running, see: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you have questions about your server, please contact our Support team.

Identified: Updates are continuing to roll out across our hosting fleet

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: We are continuing to monitor patch deployment across our hosting fleets.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL): 8.1.34 (built on 21 Oct 2026) PHP 8.0 (EOL): 8.0.30 (built on 21 Oct 2026) PHP 7.4 (EOL): 7.4.33 (built on 21 Oct 2026) Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

InterWorx PHP builds

Control panel PHP

IW6 (EL6, EL7) iworxphp72-php: 7.2.34-114

IW7 (EL7, EL8) iworxphp72-php: 7.2.34-114

IW8 (EL8, EL9) iworxphp82-php: 8.2.35-4

Customer PHP, iworx builds

php56: 5.6.40-47.2 (EL6, EL7) php70: 7.0.33-47.2 (EL6, EL7) php71: 7.1.33-34.2 (EL6, EL7) php72: 7.2.34-29.3 (EL6, EL7) php73: 7.3.33-22.2 (EL6, EL7) php74: 7.4.33-29.3 (EL7) php80: 8.0.30-19.3 (EL7) php81: 8.1.34-5.3 (EL7) php82: 8.2.35-1.3 (EL7) php83: 8.3.36-1.2 (EL7)

Customer PHP, system packages (EL7)

php-system: 8.3.36-1.1 php-system-centos54: 5.4.16-48.1 php-system-remi54: 5.4.45-19.1 php-system-remi55: 5.5.38-13.1 php-system-remi56: 5.6.40-41.1 php-system-remi70: 7.0.33-42.1 php-system-remi71: 7.1.33-29.1 php-system-remi72: 7.2.34-29.1 php-system-remi73: 7.3.33-22.1 php-system-remi74: 7.4.33-31.1 php-system-remi80: 8.0.30-21.1 php-system-remi81: 8.1.34-6.1 php-system-remi82: 8.2.35-1.1

Customer PHP, Remi upstream (EL8, EL9)

php85: 8.5.12 php84: 8.4.27 php83: 8.3.36 php82: 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: The security patch deployment is progressing well across the affected environments. Our teams are continuing to work toward completing the deployment and ensuring the security of the impacted services.

We will provide further updates as more information becomes available.

Identified: The Patch deployment is underway across affected environments with good progress. We will share another update as soon as more information is available.

Thank you for your understanding and patience.

Identified: Patch deployment continues across the affected hosting environments. Our Security and Engineering teams are monitoring the rollout to ensure successful deployment and maintain service stability.

We will continue to provide updates as progress is made.

Thank you for your patience.

Identified: Patch deployment is ongoing across our fleet. We appreciate your continued patience.

Identified: We are continuing to work on a fix for this issue.

Identified: Our Security and Engineering teams continue to assess the remaining hosting environments and verify the deployment of security updates. The rollout is progressing in stages, with teams monitoring systems to help maintain service stability. We will continue to monitor progress and share further updates as more information becomes available. To check the PHP version currently running on your site, please refer to this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: Our Security and Engineering teams are continuing to deploy and verify security updates across our hosting environments. The work is progressing in stages, and teams are monitoring systems throughout the rollout to help maintain service stability.

We are continuing to assess the remaining environments and will share further updates as patching progresses. To check the PHP version currently running on your site, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have concerns, please contact our Support team.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1.34-5 (Vendor backport) PHP 8.0.30-12 (Vendor backport) PHP 7.4.33-19 (Vendor backport)

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

Customers using cPanel/WHM can patch PHP Versions 8.5, 8.4, 8.3, 8.2, along with the backported versions 8.1, 8.0 and 7.4 by performing a cPanel update and the running a yum update.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

We are currently analyzing the security releases and testing deployment paths in our staging environments to ensure service stability. At this time, no patches or modifications have been rolled out to production systems.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution.

Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available.

We are continuing to closely monitor the situation and will provide further updates as additional information becomes available.

If you need assistance or have any concerns, please contact our Support team.

Monitoring: The security updates for CVE-2026-109618 and CVE-2026-109619 have been rolled out across our hosting fleet. Our teams continue to monitor the environment.

If your site uses an end-of-life PHP version (PHP 8.1 or older), we strongly recommend moving it to PHP 8.2 or newer. Some older PHP versions no longer receive security fixes from their vendors.

To check which PHP version your site is running, see: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you have questions about your server, please contact our Support team.

Identified: Updates are continuing to roll out across our hosting fleet

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: We are continuing to monitor patch deployment across our hosting fleets.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments. Customers on EOL PHP versions are encouraged to udpate their applications to run with supported versions of PHP

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

Identified: Patch deployment is progressing well across the affected environments.

To check the PHP version currently running on your site, please refer to this help article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The fixed PHP versions identified so far include:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL): 8.1.34 (built on 21 Oct 2026) PHP 8.0 (EOL): 8.0.30 (built on 21 Oct 2026) PHP 7.4 (EOL): 7.4.33 (built on 21 Oct 2026) Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

InterWorx PHP builds

Control panel PHP

IW6 (EL6, EL7) iworxphp72-php: 7.2.34-114

IW7 (EL7, EL8) iworxphp72-php: 7.2.34-114

IW8 (EL8, EL9) iworxphp82-php: 8.2.35-4

Customer PHP, iworx builds

php56: 5.6.40-47.2 (EL6, EL7) php70: 7.0.33-47.2 (EL6, EL7) php71: 7.1.33-34.2 (EL6, EL7) php72: 7.2.34-29.3 (EL6, EL7) php73: 7.3.33-22.2 (EL6, EL7) php74: 7.4.33-29.3 (EL7) php80: 8.0.30-19.3 (EL7) php81: 8.1.34-5.3 (EL7) php82: 8.2.35-1.3 (EL7) php83: 8.3.36-1.2 (EL7)

Customer PHP, system packages (EL7)

php-system: 8.3.36-1.1 php-system-centos54: 5.4.16-48.1 php-system-remi54: 5.4.45-19.1 php-system-remi55: 5.5.38-13.1 php-system-remi56: 5.6.40-41.1 php-system-remi70: 7.0.33-42.1 php-system-remi71: 7.1.33-29.1 php-system-remi72: 7.2.34-29.1 php-system-remi73: 7.3.33-22.1 php-system-remi74: 7.4.33-31.1 php-system-remi80: 8.0.30-21.1 php-system-remi81: 8.1.34-6.1 php-system-remi82: 8.2.35-1.1

Customer PHP, Remi upstream (EL8, EL9)

php85: 8.5.12 php84: 8.4.27 php83: 8.3.36 php82: 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: The security patch deployment is progressing well across the affected environments. Our teams are continuing to work toward completing the deployment and ensuring the security of the impacted services.

We will provide further updates as more information becomes available.

Identified: The Patch deployment is underway across affected environments with good progress. We will share another update as soon as more information is available.

Thank you for your understanding and patience.

Identified: Patch deployment continues across the affected hosting environments. Our Security and Engineering teams are monitoring the rollout to ensure successful deployment and maintain service stability.

We will continue to provide updates as progress is made.

Thank you for your patience.

Identified: Patch deployment is ongoing across our fleet. We appreciate your continued patience.

Identified: We are continuing to work on a fix for this issue.

Identified: Our Security and Engineering teams continue to assess the remaining hosting environments and verify the deployment of security updates. The rollout is progressing in stages, with teams monitoring systems to help maintain service stability. We will continue to monitor progress and share further updates as more information becomes available. To check the PHP version currently running on your site, please refer to this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have any concerns, don't hesitate to get in touch with our Support team.

Identified: Our Security and Engineering teams are continuing to deploy and verify security updates across our hosting environments. The work is progressing in stages, and teams are monitoring systems throughout the rollout to help maintain service stability.

We are continuing to assess the remaining environments and will share further updates as patching progresses. To check the PHP version currently running on your site, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If your site is running an unsupported or end-of-life PHP version, we recommend updating your code to a supported version and switching to it as soon as possible. If you need assistance or have concerns, please contact our Support team.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel EasyApache4 ea-php74: 7.4.33-19 ea-php80: 8.0.30-12 ea-php81: 8.1.34-5 ea-php82: 8.2.35 ea-php83: 8.3.36 ea-php84: 8.4.27 ea-php85: 8.5.12

CloudLinux EasyApache4 ea-php52: 5.2.17-27 ea-php53: 5.3.29-29 ea-php54: 5.4.45-82 ea-php55: 5.5.38-64 ea-php56: 5.6.40-25 ea-php70: 7.0.33-29 ea-php71: 7.1.33-20 ea-php72: 7.2.34-12 ea-php73: 7.3.33-15 ea-php74: 7.4.33-18 ea-php80: 8.0.30-11 ea-php81: 8.1.34-4 ea-php82: 8.2.34-2 ea-php83: 8.3.35-2 ea-php84: 8.4.26-2 ea-php85: 8.5.11-2

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Engineering teams are actively working to deploy patched PHP builds across our hosting infrastructure.

The current patched PHP builds are:

cPanel PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1.34-5 (Vendor backport) PHP 8.0.30-12 (Vendor backport) PHP 7.4.33-19 (Vendor backport)

Plesk (v18.0.81.4) PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 PHP 8.1 (EOL) 7.4.33 (built on 21 Oct 2026) PHP 8.0 (EOL) 77.4.33 (built on 21 Oct 2026) PHP 7.4 (EOL) 7.4.33 (built on 21 Oct 2026)

Windows Plesk PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35

To verify that your site is patched, please follow this Help Article: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/

If you are not currently patched, please try running a package update through your control panel. If your site is running an unsupported/EOL version of PHP, please update your code to work on a Supported version, and switch to that as soon as possible.

We will continue to provide status updates, and we will be emailing individuals tailored information as best we can.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

Customers using cPanel/WHM can patch PHP Versions 8.5, 8.4, 8.3, 8.2, along with the backported versions 8.1, 8.0 and 7.4 by performing a cPanel update and the running a yum update.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: Our Security and Engineering teams are continuing to evaluate the optimal patching strategy for our hosting environments.

We are currently analyzing the security releases and testing deployment paths in our staging environments to ensure service stability. At this time, no patches or modifications have been rolled out to production systems.

Our infrastructure remains under heightened monitoring, and we will share further details here as soon as our deployment plan and maintenance windows are finalized.

If you need assistance or have any concerns, please contact our Support team.

Identified: We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution.

Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available.

We are continuing to closely monitor the situation and will provide further updates as additional information becomes available.

If you need assistance or have any concerns, please contact our Support team.

Resolved: This incident has been resolved.

Monitoring: A fix has been implemented and we are monitoring the results

Investigating: We are currently investigating reported issues with Cloud Object Storage and Block Storage. Our engineering team is engaged and is reviewing the system to determine the cause.