https://status.patrickfound.com/affected/websites-created-before-1-september-2026/ Incident history github.com/cstate en 2026-10-21T10:00:00+01:00 2026-10-21T10:00:00+01:00 https://status.patrickfound.com/issues/2026-10-21-critical-php-security-vulnerabilities-cve-2026-109618-cve-2026-109619/ Wed, 21 Oct 2026 10:00:00 +0100 https://status.patrickfound.com/issues/2026-10-21-critical-php-security-vulnerabilities-cve-2026-109618-cve-2026-109619/ As you may be aware, two critical PHP security vulnerabilities have been announced by the PHP Security Team. As of two weeks ago, all client websites are on PHP 8.5 owing to earlier optimisation of the web hosting stack I offer. For the avoidance of doubt, this also includes websites created before 1 September 2026 (legacy), where I am still responsible for maintenance/updates and have access to cPanel. PHP 8.5 is the latest supported version, and means all websites hosted by PatrickFound. <p><em>As you may be aware, two critical PHP security vulnerabilities have been announced by the PHP Security Team.</em> <br> <br> As of two weeks ago, all client websites are on PHP 8.5 owing to earlier optimisation of the web hosting stack I offer.</p> <p>For the avoidance of doubt, this also includes websites created before 1 September 2026 (legacy), where I am still responsible for maintenance/updates and have access to cPanel.</p> <p>PHP 8.5 is the latest supported version, and means all websites hosted by <em>PatrickFound.,</em> or where I maintain a website on your own server, will recieve the critical updates required.</p> <p>Upstream vendors have confirmed the following:</p> <ul> <li>Emergency maintenance is being performed to keep sites protected and upstream patches are being implemented as they become available.</li> <li>Additional protections have been put in place to mitigate risk.</li> </ul> <p>Websites created before 1 September 2026 may experience temporary interruptions.</p>