On 21 October 2026, the PHP development team released emergency security updates addressing the following vulnerabilities:

• CVE-2026-109618

• CVE-2026-109619

These vulnerabilities could potentially allow unauthorized parties to execute malicious code on affected servers.

We would like to reassure you that these vulnerabilities are industry-wide and are not specific to LiquidWebSpace, our infrastructure, or any individual hosting provider.

What has LiquidWebSpace done?

As soon as the official security patches became available, our infrastructure team prioritized their deployment across our managed hosting network.

We can confirm that:

• All applicable security patches have been deployed across our managed hosting servers.

• PHP versions have been updated to the relevant patched releases.

• cPanel and WHM have been updated to their appropriate security-patched versions.

• Our team has carried out verification checks to confirm that the applicable updates have been successfully installed.

We acted as quickly as possible to address these vulnerabilities and minimize any potential exposure for websites hosted on our infrastructure.

Do you need to take any action?

No action is required from you regarding the server-level PHP updates, as these have been handled by our infrastructure team.

However, we strongly recommend that all customers and resellers take this opportunity to review the security of their websites and applications.

This includes ensuring that:

• WordPress, Joomla, Drupal and other content management systems are updated.

• Website plugins, themes and third-party software are running their latest secure versions.

• Custom PHP applications and code are regularly reviewed for potential security vulnerabilities.

• Any unsupported or outdated software is upgraded where possible.

Although the underlying PHP vulnerabilities have been patched, it is important to remember that server-level security updates do not automatically address vulnerabilities within individual websites, plugins or custom applications.

Further information

For customers wishing to read the official technical announcement, further details are available directly from the PHP development team:

Official PHP Security Announcement:
https://www.php.net/archive/2026.php

cPanel Security Advisory:
https://support.cpanel.net/hc/en-us/articles/44397389677335-Critical-PHP-Security-Release-CVE-2026-109618-and-CVE-2026-109619

Our commitment to your security

At LiquidWebSpace, maintaining a secure, reliable and up-to-date hosting environment is one of our highest priorities.

Our team continuously monitors emerging security advisories and works proactively to implement critical updates as quickly as possible.

We appreciate the trust you place in LiquidWebSpace to host your websites and applications.

Should you have any questions or concerns, please do not hesitate to contact our support team.

Kind regards,

LiquidWebSpace Support Team
LiquidWebSpace Ltd
https://www.liquidwebspace.com