News

The PHP developers have issued a warning about two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. As a precautionary measure, we decided to disable PHP on all our servers at 12:00 PM, temporarily making websites inaccessible. We made this decision because no fix was available at the time, and keeping everything online would have left the door wide open for hackers.

On our own website, we converted the homepage to static HTML and kept everyone informed about the situation. At around 4:00 PM, the security fix was released, and by approximately 6:00 PM, the majority of our servers had been patched.Throughout the evening and overnight, we also patched all customer servers, including those belonging to customers without a management contract or SLA.

Unfortunately, this is unlikely to be the last time something like this happens. Fortunately, thanks to DirectAdmin, we were able to patch all PHP versions. However, officially, only PHP 8.2 and newer versions are supported. We therefore strongly recommend making sure your website is compatible with at least PHP 8.2 or higher.

Thankfully, we were not alone in making this decision. Many other hosting providers and website administrators also chose to temporarily take websites offline, including government organizations and healthcare institutions.

Follow our news feed in your favorite RSS reader. RSS has the major advantage that you will never miss a news post, as your reader will notify you whenever a new post is published.
Click the RSS icon below to import our feed.

As an extension of our information services, we also make use of social media. Follow us today on X or Facebook to stay informed even more quickly about news, announcements, and other updates.