Security Notice: Critical PHP Vulnerability (PHP2Shell)

We’re aware of a newly disclosed critical vulnerability in PHP, known as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619). This affects the PHP engine itself and impacts most PHP versions released over the last decade.

On Oct. 21st, the PHP project released security updates and we have applied them across our servers.
We’ll be emailing customers with more details and recommendations. But also note that sites that do not use PHP, like ASP.NET-only sites, are not affected.

If you have questions, contact our support team.