Date: 22 October 2026
Severity: Critical (CVSS 9.2)
Status: Resolved — Security updates completed across all VERAHOST hosting servers
Overview
At VERAHOST, maintaining a secure and reliable hosting environment is one of our priorities.
We have completed the security updates addressing the reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 across our hosting servers.
PHP powers many popular websites and applications, including WordPress, WooCommerce, Joomla, Magento, and other PHP-based platforms. Security updates help protect these applications against vulnerabilities affecting their underlying server environment.
What Was Done?
Our technical team completed the following actions:
-
Reviewed our hosting servers to identify PHP versions requiring security updates.
-
Applied the official security patches to the affected PHP versions.
-
Reloaded or restarted the relevant web and PHP services to activate the updates.
-
Verified the security update status across our hosting servers.
The work was completed with no expected disruption to hosted websites. Only brief, routine service reloads were required.
Current Status
All VERAHOST hosting servers have been patched against CVE-2026-109618 and CVE-2026-109619.
No immediate action is required from hosting clients for this server-level security update.
What Should You Do?
Although the server-level updates have been completed, we recommend following these website security practices:
-
Keep your CMS, themes, and plugins updated to their latest secure versions.
-
If your website uses an older or unsupported PHP version, consider upgrading to a currently supported release.
-
Maintain regular backups of your website files and databases.
If you need assistance checking your website's PHP version or selecting a supported version, our technical support team will be happy to help.
Need Assistance?
If you have questions or concerns about this security advisory, please contact the VERAHOST support team through your usual support channel.
Thank you for choosing VERAHOST. We remain committed to providing a secure and reliable hosting environment for your websites and applications.
VERAHOST Technical Team
