As you may have seen in the media (BBC), two critical security vulnerabilities have been discovered in PHP, CVE-2026-109618 and CVE-2026-109619. The PHP developers have released security updates to address these issues.
All of our servers and systems are subject to continuous patch management with critical updates being deployed as soon as they are made available. Although the PHP developers have released security updates, there may be a short delay until these fixes become available through the various update channels. As soon as an update is made available, it is being installed.
Windows Hosting Services
PHP is not currently installed on our Windows hosting servers.
Linux Hosting
Although PHP is often viewed as a core Linux component, it is only installed in a few of our servers.
As of 14:30 BST today (22-Oct-2026) , all of our Linux server operating systems have been updated to the latest available updates.
Update 23 October 2026
We are currently installing additional updates on a number of Linux servers. These updates may require restarts, so there may be short interruptions of service.