On the 21 October two critical PHP security vulnerabilities were disclosed

PHP is the programming language used to drive 70% of the world’s websites.  A group of cyber-security researchers and organisations disclosed two vulnerabilities within PHP which they warned could have the potential to upend sites across the internet. The technical bugs, given the technical IDs CVE-2026-109618 and CVE-2026-109619, were ranked a 9.2 out of 10 in severity by researchers.

Keeping your website secure

All of the websites provided by Faithful.ie use PHP and by 9:00am on 22 October our team ensured all versions of PHP were updated with the latest iteration containing the appropriate latest security patches.  All websites were checked and are unaffected. This is one of the advantages of our managed dedicated servers.

Security updates never stop

Keeping on top of website security is what Faithful.ie does - 24 hours a day 365 days a year.

See Why use a Dedicated Server?

What if our website is not provided by Faithful.ie?

You should take immediate steps to contact your web hosting company and ensure the appropriate latest supported version of PHP containing the security patches is installed. e.g. Currently PHP version 8.5.12 (at the time of publication of this article)

Protecting your websitesProtecting your websites