catalyst2 incident

CVE-2026-109618 / CVE-2026-109619 Response

Notice Ongoing View vendor source →

catalyst2 is currently experiencing a notice incident affecting Dedicated Servers and Shared Hosting, which began 4h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 12:12 PM UTC
Resolved
Ongoing
Duration
● 3h 50m
Detected by Pingoru
Oct 21, 2026, 12:12 PM UTC

Affected components

Dedicated ServersShared Hosting

Update timeline

  1. identified Oct 21, 2026, 12:12 PM UTC

    Our teams are currently responding to PHP CVE-2026-109618 / CVE-2026-109619. This involves applying mitigations and updates across our platforms. Some of these mitigations may change PHP behaviour which in turn may cause behavioural changes in applications. Our apologies to any customers impacted by these changes, which are necessary to preserve security of your services. Our support teams are on hand to assist with any queries you may have, please contact us in the usual way.