Security update: PHP has announced two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0: 9.2), with an official fix scheduled for today, 21 October, at 14:00 UTC.
SiteGround customers are already protected. Our security team has applied server-level protection across all our servers ahead of the release, so no action is needed on your side.
If you run PHP elsewhere, upgrade as soon as the fixed versions are released.
Full details on our blog: https://t.co/EfFLFRMKnm
@_Ivermectincure You have to wonder if the incidents are actually higher than we see and the reason it's not higher is because of differences during the manufacturing process and not that the risks are particularly rare.