At HostingSpell, keeping your websites secure, stable, and reliable is one of our highest priorities.
Following the recent disclosure of critical PHP security vulnerabilities, including CVE-2026-109618 and CVE-2026-109619, our technical team has successfully completed the necessary security patching and maintenance across our affected hosting infrastructure.
We are pleased to confirm that the security updates have been successfully applied to the following HostingSpell services:
- Cloud Hosting Plans
- Premium Hosting Plans
- Reseller Hosting Plans
All affected services are operating normally, and the maintenance has been completed successfully.
What Was Fixed?
The security updates address recently identified PHP vulnerabilities involving memory management and request handling, which could potentially expose applications to security risks.
The necessary vendor-provided security patches have been applied to protect affected hosting environments.
Some PHP security fixes are delivered through a process called backporting, meaning an existing PHP version can receive security fixes without changing its displayed version number.
We Recommend PHP 8.2 or Above
While our hosting environments have received the necessary security updates, we strongly recommend all customers use PHP 8.2 or above for their websites and applications.
Using a newer, supported PHP version provides several advantages:
- Improved security and protection against known vulnerabilities.
- Better performance and memory efficiency.
- Improved compatibility with modern WordPress, WooCommerce, Laravel, and other PHP applications.
- Access to ongoing security updates and improvements.
For the best long-term security, we recommend upgrading to PHP 8.4 or newer wherever your website and applications support it.
You can easily change your website’s PHP version through cPanel → PHP Selector, depending on your hosting configuration.
Before upgrading, please ensure your website, plugins, themes, and dependencies are compatible with the selected PHP version.
Do You Need to Take Any Action?
No immediate action is required regarding these security patches. HostingSpell has handled the necessary server-level updates for its managed Cloud, Premium, and Reseller Hosting environments.
However, customers running PHP versions older than 8.2 are encouraged to upgrade after verifying application compatibility.
Self-Managed VPS and Dedicated Servers
Customers managing their own server operating systems or PHP installations are responsible for applying their respective vendor security updates.
If your server uses CloudLinux, verify that the relevant Alt-PHP or EasyApache packages contain fixes for both vulnerabilities.
You should also check your cPanel, operating system, web server, and PHP update status and restart affected services as directed by the vendor.
Important: Security patches must be verified through the installed package details or vendor advisories. A PHP version number or build date alone is not sufficient in every environment.
Our Commitment to Your Security
At HostingSpell, we continuously monitor security advisories, deploy critical patches, and maintain our infrastructure to provide a secure and dependable hosting experience.
We appreciate your continued trust and cooperation.
If you need assistance upgrading your PHP version or encounter any issues, our technical support team is always here to help.
Share Your Comments & Feedback