The PHP2Shell security patches (CVE-2026-109618 and CVE-2026-109619) have been fully deployed across our hosting platforms. The relevant fixes have also been backported to all PHP versions available on the platform, so older versions are also protected. If you run PHP on an unmanaged VPS, please check your operating system or PHP vendor’s update channels for the official security updates. We recommend installing them as soon as they are available.
