Netcom has completed security updates to address two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619.
The issue has received international coverage, including a BBC News report about websites going offline while organisations applied security fixes. The PHP project and the UK’s National Cyber Security Centre have also published guidance urging affected organisations to update their systems. Wikipedia
Our team has worked tirelessly to monitor security releases, install the relevant patches and verify the installed versions.
The PHP environments checked on our hosting server now include fixes for both reported vulnerabilities. Customers do not need to install these server updates themselves as this is a server side programing language.
For further information:
BBC News: Websites taken down worldwide as critical PHP cyber-security update issued
Read the BBC article
PHP: Official security advisory and release announcements
Read PHP’s security updates
National Cyber Security Centre: Critical security issue affecting PHP
Read the NCSC guidance
CloudLinux: Security fixes and package availability
Read CloudLinux’s updates
Thank you for your patience and continued trust in Netcom.