Web Hosting PHP Vulnerability Advisory Notice
Affected
Degraded performance from 10:03 PM to 6:07 AM
- Resolved · UTC
CloudLinux has now published all patched PHP versions from 5.2 - 8.5.
No further action is required. - Identified · UTC
This information only applies to customers who have business web hosting with Tech Dot.
A critical security vulnerability (CVE-2026-109618 and CVE-2026-109619) was disclosed in PHP, the software that powers most websites, including WordPress.
The PHP project released fixes at 1:00am Sydney time today, Thursday 22 October. Your website sits behind Cloudflare, which has already released emergency protection rules that help block known attack attempts.
Our hosting provider is now rolling out the PHP patch across their servers, and we are monitoring this closely.
You don’t need to do anything at this stage. If we need any action from you, or if we see anything unusual on your site, we will contact you directly.
Please get in touch if you have any questions.