Critical PHP Security Updates – Action Required for VPS and Dedicated Server Customers

  • Friday, 23rd October, 2026
  • 11:35am

Dear Valued Customers,

The PHP development team has announced two critical security vulnerabilities affecting PHP and has released security updates to address these issues. Under certain conditions, these vulnerabilities could allow attackers to execute malicious code on affected systems.

What Has eHostingServer Done?

We have already applied the available security updates to our shared cPanel hosting servers to help protect our shared hosting customers.

Action Required for VPS and Dedicated Server Customers

If you use an eHostingServer VPS or dedicated server, you are responsible for maintaining your server software and applying security updates.

We strongly recommend that you take the following actions as soon as possible:

  • Update PHP immediately: Install the applicable security patches for your installed PHP version.

  • Use a supported PHP version: Upgrade to the latest stable PHP version available that is compatible with your applications.

  • Update all PHP versions: If multiple PHP versions are installed on your server, check each version and apply the relevant security updates.

  • Review your applications: Ensure your websites and applications remain compatible and secure after updating.

  • Keep your server software updated: Regularly install security patches for your operating system, control panel, and other server components.

Official PHP Security Announcement

For technical details and the official security updates, please refer to the PHP announcement:

https://www.php.net/archive/2026.php#2026-10-21-5

Please note that customers managing their own VPS or dedicated servers are responsible for applying and verifying the necessary security updates. 

Your server security is important to us. Please take action promptly to help protect your websites, applications, and data.

Thank you for choosing eHostingServer.

« Back