Elitehost incident

PHP Security Vulnerabilities Patched

Notice

Ongoing since 09:31 AM UTC, affecting Web Hosting Services.

monitoring Oct 23, 2026, 02:03 AM UTC

Updated CloudLinux alt-php packages (used by PHP Selector) have been released and installed across all our hosting servers. These builds now match the official PHP release versions: 8.2.35, 8.3.36, 8.4.27 and 8.5.12. These replace the previously installed backported builds, which already addressed CVE-2026-109618 and CVE-2026-109619\. Older PHP versions remain patched through vendor-provided backports.

Started: Oct 22, 2026, 09:31 AM UTC
Resolved: Ongoing
Duration: ● 1d 2h
Detected by Pingoru: Oct 22, 2026, 09:31 AM UTC

Affected components

Web Hosting Services

Update timeline

monitoring Oct 22, 2026, 09:31 AM UTC

$34
monitoring Oct 23, 2026, 02:03 AM UTC

Updated CloudLinux alt-php packages (used by PHP Selector) have been released and installed across all our hosting servers. These builds now match the official PHP release versions: 8.2.35, 8.3.36, 8.4.27 and 8.5.12. These replace the previously installed backported builds, which already addressed CVE-2026-109618 and CVE-2026-109619\. Older PHP versions remain patched through vendor-provided backports.

Your product runs on more than Elitehost

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.