Following the disclosure of PHP security vulnerabilities, we applied emergency mitigations yesterday, 21 October, to all shared and reseller hosting and managed server infrastructure to provide immediate protection while awaiting official vendor patches.
We have since been applying vendor updates as they become available. Vendor security updates have now been applied across all our cPanel shared and reseller hosting servers.
We are continuing to work to apply the vendor updates to cPanel Managed Servers as this announcement is made. And once vendor patches are released for any remaining hosting servers these will be updated as well.
cPanel Shared hosting customers: Our team has handled the server updates. Customers using older PHP versions (8.1 and earlier) are still urged to check their website’s compatibility and upgrade to a supported version. Please contact support if you need assistance.
Unmanaged VPS and dedicated server customers: You are responsible for reviewing all PHP versions installed on your server and applying the relevant security updates, including updates supplied through your control panel.
Please visit our status page for further information and progress updates.
