Canadian Web Hosting incident
PHP security update — please review your website’s PHP version
Ongoing since 06:00 AM UTC, affecting cPanel shared servers.
Dear Customer, We are responding to two critical PHP vulnerabilities that could allow attackers to run unauthorized code. Security updates are being deployed across our hosting platform, alongside additional firewall protection while patching continues. cPanel has released security patches for PHP 7.4, 8.0 and 8.1, as well as newer supported branches. Earlier versions, including PHP 5.x,doesn't have a patch available presently. Applying the correct patch is essential for protection against these vulnerabilities. PHP 5.x, 7.x, 8.0 and 8.1 no longer receive security updates directly from the PHP project. Vendor backports help address specific vulnerabilities, but we strongly recommend planning a move to a currently supported PHP branch for ongoing security maintenance and compatibility. Please review your website’s PHP version and contact Support to plan a move to a compatible, supported version such as PHP 8.3 or 8.4. Back up your website, update its software, themes and plugins, and test compatibility before switching. The selected PHP version must also have the latest security patches.
Affected components
Update timeline
- identified Oct 21, 2026, 06:00 AM UTC
Dear Customer, We are responding to two critical PHP vulnerabilities that could allow attackers to run unauthorized code. Security updates are being deployed across our hosting platform, alongside additional firewall protection while patching continues. cPanel has released security patches for PHP 7.4, 8.0 and 8.1, as well as newer supported branches. Earlier versions, including PHP 5.x,doesn't have a patch available presently. Applying the correct patch is essential for protection against these vulnerabilities. PHP 5.x, 7.x, 8.0 and 8.1 no longer receive security updates directly from the PHP project. Vendor backports help address specific vulnerabilities, but we strongly recommend planning a move to a currently supported PHP branch for ongoing security maintenance and compatibility. Please review your website’s PHP version and contact Support to plan a move to a compatible, supported version such as PHP 8.3 or 8.4. Back up your website, update its software, themes and plugins, and test compatibility before switching. The selected PHP version must also have the latest security patches.
Your product runs on more than Canadian Web Hosting
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services