Hello,

We want to make you aware of two critical security vulnerabilities affecting PHP, the programming language used by many websites and web applications, including WordPress.

The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, have been assigned a critical severity rating of 9.2 out of 10. These vulnerabilities could potentially allow attackers to execute malicious code on affected servers.

The PHP development team has scheduled an emergency security release for Wednesday, October 21, 2026, at 10:00 AM Eastern Time (14:00 UTC).

Protection for Shared Hosting Customers

Our shared hosting servers utilize CloudLinux and Imunify360, which provide additional layers of security against these vulnerabilities.

Imunify360 has released updated Web Application Firewall (WAF) rules designed to help block known exploitation attempts. CloudLinux is also working to provide updated PHP packages containing the necessary security fixes.

Our team is monitoring the situation and will ensure the appropriate server-level protections and security updates are applied as they become available.

Important Information for VPS Customers

Customers using our Virtual Private Server (VPS) services should review their PHP installations and ensure their websites and applications are running currently supported versions of PHP.

We strongly recommend the following:

  1. Verify your PHP version. Ensure your applications are running a supported PHP release, preferably PHP 8.3, 8.4, or 8.5.

  2. Update outdated installations. Older, unsupported PHP versions may not receive official security fixes and should be upgraded as soon as possible.

  3. Apply security updates promptly. Even supported PHP versions may require updates to address these vulnerabilities.

  4. Keep applications updated. Ensure WordPress, plugins, themes, and other PHP-based applications remain up to date.

Unless your VPS includes managed operating system and software updates, you are responsible for ensuring the appropriate PHP security updates are installed.

We're Here to Help

Security is a top priority at BlueJet Hosting, and we will continue monitoring these vulnerabilities and applying available protections across our managed hosting infrastructure.

If you're unsure whether your server or applications may be affected, or need assistance reviewing your PHP installation, please contact our support team.

Thank you for trusting BlueJet Hosting with your hosting services.

Best regards,

The BlueJet Hosting Team



Wednesday, October 21, 2026

« Back