Dear Valued Customers,
We would like to inform you of recently identified critical security vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, also known as “php2shell.” These vulnerabilities expose websites and applications using the PHP runtime that are not patched to security risks.
The server team are performing the necessary server-side security updates where applicable. However, customers are responsible for ensuring their website scripts, CMS platforms, plugins and themes are kept up to date and remain compatible with the latest supported PHP version.
What you need to do:
- Update your CMS, plugins, themes and custom scripts to their latest stable versions.
- Check that your website is compatible with the latest supported PHP version.
- Back up your website before performing updates or making PHP version changes.
For self-managed VPS/Cloud Server/Smart Dedicated Servers customers:
You are responsible for applying the necessary PHP security updates and maintaining your server environment. Please ensure your PHP installation is patched and your website applications remain compatible with the updated PHP version.
If you encounter compatibility issues or require assistance, please contact our support team.
We recommend taking these precautions promptly to help keep your website secure and functioning properly.
Thank you for your cooperation.
Best Regards,
Yeahhost Server Team
jeudi, octobre 22, 2026