You may already know that two serious security weaknesses were publicly identified on 21 October 2026, known as CVE-2026-109618 and CVE-2026-109619. In simple terms, they could potentially allow an attacker to take control of an affected website server. The UK National Cyber Security Centre has advised website owners to update PHP as a priority.ncsc.gov
Please be reassured: I have reviewed your website and hosting environment and taken the necessary action to protect it. This included checking the PHP version in use, applying the appropriate security update or protective configuration, restarting the affected web services where required, and checking for any signs of unusual activity. Security updates have been released by the PHP team, and updating is the complete fix for this issue.
You do not need to do anything at this time. Your website, email and data remain available as normal, and no action is required from you.
As always, if you notice anything unusual with your website—such as unexpected changes, unfamiliar users, or difficulty logging in—please contact me straight away.
If you have any questions or concerns, please don’t hesitate to get in touch.
Martin
Powered by WHMCompleteSolution
