Warning
Critical Security Vulnerabilities in PHP – Security Updates Applied
On 21 October 2026, two critical security vulnerabilities in the PHP programming language were made public. Under certain conditions, they could allow unauthorized access to web servers.
We responded right away and turned on extra protective measures on our servers even before the security updates came out.
All PHP versions we offer now have the necessary security fixes. This includes older PHP versions that the PHP project no longer officially supports.
To protect our infrastructure and your data, we have also temporarily switched off some of our own services as a precaution. They will be fully available again once the security checks are finished. Our customers’ websites were not affected by these shutdowns.
So far we have no concrete evidence that the vulnerabilities were successfully exploited on our systems. However, we cannot completely rule out that they were exploited before the security updates were installed.
Important: We therefore recommend that you check your websites and applications for unusual changes, especially unknown files, unexpected modifications or newly created user accounts.
Our technicians continue to monitor the systems and are investigating any suspicious activity.
You can find more technical information in the official security advisory from the PHP project.
FR