Tibus incident

PHP2Shell Vulnerability (CVE-2026-109618 & CVE-2026-109619)

Tibus is currently experiencing a minor incident affecting Dublin (Managed Hosting) and London (Managed Hosting), which began 2h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 01:46 PM UTC
Resolved
Ongoing
Duration
● 2h 23m
Detected by Pingoru
Oct 21, 2026, 01:46 PM UTC

Affected components

Dublin (Managed Hosting)London (Managed Hosting)

Update timeline

  1. identified Oct 21, 2026, 01:46 PM UTC

    We are aware of the current 'PHP2Shell' vulnerability. We are awaiting the release of the patch, expected today (Wednesday) or tomorrow (Thursday). When this is validated we will apply this automatically across our customer base. In the meantime we are also applying additional mitigations across our customer's servers. If you are a hosting customer you should reach out to your web developers as soon as possible to confirm that your application supports PHP version 8.2 or above.