{
  "is": "issue",
  "title": "Critical PHP Security Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)",
  "body": "\u003cp\u003e\u003cem\u003eAs you may be aware, two critical PHP security vulnerabilities have been announced by the PHP Security Team.\u003c/em\u003e \u003cbr\u003e\n\u003cbr\u003e\nAs of two weeks ago, all client websites are on PHP 8.5 owing to earlier optimisation of the web hosting stack I offer.\u003c/p\u003e\n\u003cp\u003eFor the avoidance of doubt, this also includes websites created before 1 September 2026 (legacy), where I am still responsible for maintenance/updates and have access to cPanel.\u003c/p\u003e\n\u003cp\u003ePHP 8.5 is the latest supported version, and means all websites hosted by \u003cem\u003ePatrickFound.,\u003c/em\u003e or where I maintain a website on your own server, will recieve the critical updates required.\u003c/p\u003e\n\u003cp\u003eUpstream vendors have confirmed the following:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEmergency maintenance is being performed to keep sites protected and upstream patches are being implemented as they become available.\u003c/li\u003e\n\u003cli\u003eAdditional protections have been put in place to mitigate risk.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eWebsites created before 1 September 2026 may experience temporary interruptions.\u003c/p\u003e\n",
  "createdAt": "2026-10-21 10:00:00 +0100 +0100",
  "lastMod": "2026-10-21 23:06:51 +0100 +0100",
  "permalink": "https://status.patrickfound.com/issues/2026-10-21-critical-php-security-vulnerabilities-cve-2026-109618-cve-2026-109619/",
  "severity": "disrupted",
  "resolved": false,
  "informational": false,
  "resolvedAt": "",
  "affected": ["Websites Created Before 1 September 2026", "Websites Created From 1 September 2026"],
  "filename": "2026-10-21-critical-php-security-vulnerabilities-cve-2026-109618-cve-2026-109619.md"
}