PHP Security Update: Vulnerabilities Addressed Across Our Managed Hosting
October 22, 2026At Advantage Creations, we continually monitor our managed hosting environment for emerging security concerns. Recently, two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were disclosed. We acted promptly to protect our hosting clients and their websites.
Our layered protections remained in place throughout the response, and we have no reported indications that client websites or hosting accounts were compromised as a result of these vulnerabilities.
What We Did
Beginning October 21, 2026, we implemented and maintained multiple safeguards across our hosting infrastructure:
- Emergency firewall rules to block known attack patterns before official patches were available.
- Additional Cloudflare Web Application Firewall protections to help stop potential exploits.
- Network-level monitoring and blocking for suspicious activity and identified attacker IP addresses.
- Tested PHP security updates deployed across our managed hosting environment after official patches became available.
- Additional safeguards, including disabling a vulnerable PHP feature as a precaution while protections remained active.
Continuous Protection for Hosting Clients
AdvantageShield and its Aegis defense engine continued monitoring client sites throughout this incident. This added layer of protection works around the clock to identify suspicious traffic, block malicious bots, help prevent brute-force login attempts, and stop common website attacks.
We also reviewed client hosting configurations and confirmed that none of our clients are running PHP 7.3 or older, versions that no longer receive standard security support.
No Action Is Required
No action is required from hosting clients at this time. We will continue monitoring security developments and applying appropriate protections and updates as needed.
For more technical detail, see the official PHP security announcement. If you have questions about your hosting account or website security, please contact us.
