PHP Security Updates – PHP2Shell Vulnerabilities

Incident Report for Cloud Next

Resolved

This incident has been resolved.
Posted Oct 23, 2026 - 10:02 BST

Update

This completes our deployment and all PHP versions across all platforms are now fully patched against the recently disclosed PHP vulnerabilities.
Posted Oct 22, 2026 - 08:54 BST

Monitoring

A fix has been implemented and we are monitoring the results.
Posted Oct 21, 2026 - 18:37 BST

Identified

PHP Security Updates

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 are now available and the upstream security fixes have also been backported to all older PHP versions. The roll out to our hosting platform has completed.
Posted Oct 21, 2026 - 18:34 BST

Update

Our system administration team have applied the upstream patches and have started to deploy the latest PHP Versions across our platforms.
Posted Oct 21, 2026 - 17:43 BST

Monitoring

We are aware of the recently disclosed PHP security vulnerabilities, commonly referred to as PHP2Shell.

As a precaution, we have already implemented additional security measures across our hosting platform.

Our systems team is now working on deploying the latest PHP security patches across our hosting platform, including backporting the necessary fixes where required.

We will continue to monitor the situation closely and provide a further update once the rollout is complete.
Posted Oct 21, 2026 - 15:27 BST
This incident affected: Web, WordPress & Reseller Hosting.