Important Security Update: Critical PHP Vulnerabilities Patched

 

On 21 October 2026, the PHP project released security fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2. These vulnerabilities could potentially allow remote code execution on affected servers.

Easynet Interactive has applied the patched PHP packages released by cPanel (EasyApache 4 / ea-php) and CloudLinux (alt-php) across our shared and reseller hosting servers. The necessary PHP services have been restarted, and the security updates are now active.

What This Means for You

  • No action is required from your side.

  • Your websites remain operational.

Important Note on PHP Version Numbers

Some patched PHP packages may display version numbers that are lower than the latest versions listed on PHP.net. This is because cPanel and CloudLinux apply security fixes to their existing PHP packages through a process known as backporting.

Therefore, an older-looking PHP version number does not necessarily mean the server remains vulnerable. The relevant patched packages include the fixes for both CVEs.

For more information, please refer to the official advisories below:

If you have any questions or require further assistance, please contact our support team by submitting a support ticket.

Thank you for your continued trust in Easynet Interactive.

Best regards,
Easynet Interactive Support Team



Thursday, October 22, 2026

« Back