Return Home

!Critical PHP Security Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Wednesday 21st October 2026 16:21:00

Two critical security vulnerabilities affecting PHP itself have been identified. Details of the vulnerabilities leaked publicly on Tuesday, October 20, 2026, ahead of their planned disclosure, and the PHP security team has scheduled an emergency security release for Wednesday, October 21, 2026 at 14:00 UTC (approximately 10:00 PM AWST, Wednesday, October 21).

Please note: Customers on our Shared Hosting platform or on a VPS with a maintenance plan do not need to take any action. HostAway will apply the patch on your behalf.

Shared hosting web servers have been patched with the latest versions of PHP. Our technicians worked through the night to ensure all nodes were patched and are now addressing subsidiary systems and running tests.

Posted 6 days ago by admin

Technicians continue to assist customers with virtual servers to update their software. We are also working on re-enabling the Members Panel soon.

Posted 4 days ago by admin

Thank you for your patience whilst we continue to work on patching the Members Panel and making it available for use. The rough estimate at this stage is late on Wednesday.

Posted 16 hours ago by admin