Further details have been released by the php foundation including patched source. More information can be viewed here: https://www.php.net/archive/2026.php#2026-10-21-5 Downstream repositories will be pushing the patches in due course. We would encourage all unmanaged server administrators to undertake the fixes detailed.
Posted Oct 21, 2026 - 15:01 BST
Identified
We have recently been made aware of critical vulnerabilities affecting all php releases from 5.x onwards.
The php foundation will be aiming to release patches for supported versions at 2026-10-21 14:00 UTC. It is expected that backported fixes will be made available for older versions through the usual repositories. You can read the blog post here: https://www.php.net/archive/2026.php#2026-10-20-1
For "Ultimate" and "Enhanced" managed customers, patches will be applied automatically via your hosting panel, or manually by our team. We may be in touch if this requires work on your server to be carried out.
If you have any questions regarding this, or would like us to assist with patching your server, please open a support ticket in your panel.
We will update this statuspage as we gain information on this vulnerability.
Posted Oct 21, 2026 - 09:58 BST
This incident affects: Coventry - Continuity House (205/DC3), Coventry (DH1), Coventry (DH2), Telehouse East (THE), Telehouse North (THN), Telehouse West (THW), and Equinix MA1 (MCR).