9 hour Response Time
Open new support ticket after ordering to get support
On 21 October 2026, PHP released emergency updates for PHP2Shell (CVE-2026-109618 / CVE-2026-109619), a critical flaw that allows unauthenticated remote code execution on unpatched servers.
If your server is not under our management, it is still vulnerable.
Verify your current PHP version and vulnerability status
Update PHP to the patched release (8.2.35, 8.3.36, 8.4.27, or 8.5.12)
Restart services and confirm the server is no longer exploitable
Provide a post-patch report