All services are updated and fully operational.

Summary: Security fixes were released for PHP, the programming language that powers many websites, addressing two serious vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. Left unpatched, vulnerabilities of this kind could allow an attacker to compromise affected websites. Because the severity was high, we applied the update immediately across our hosting platform rather than waiting for a scheduled maintenance window.

Impact: Hosted websites experienced a brief interruption of less than 1 minute while the update took effect. No data was lost, and we have no indication that any site was affected by these vulnerabilities. No other services were affected.

Resolution: Patched PHP versions were installed and all websites were moved to them. Older PHP versions that no longer receive security updates were retired for these sites. No action is needed from customers.