TotalChoice Hosting has addressed the recently disclosed critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) across our managed hosting infrastructure. Our systems administration team has applied the applicable security updates and vendor-provided patches, including CloudLinux security backports for legacy PHP versions. We have verified the vendor-provided fixes and mitigations, and our CloudLinux environments benefit from additional Imunify360 protection where installed.
Did My PHP Version Get a Fix?
Shared and Reseller Hosting (CloudLinux)
All PHP versions (5.2–8.5) receive vendor security fixes or mitigations.
VPS and Dedicated Servers with cPanel
PHP 7.4–8.5 receive security fixes. PHP 7.3 and older do not receive standard security updates.
VPS and Dedicated Servers with CloudLinux
All PHP Selector versions receive vendor security fixes or mitigations.
VPS and Dedicated Servers on CentOS 7
Security fixes require applicable TuxCare ELS coverage. Otherwise, migrate to AlmaLinux 9 or enable TuxCare ELS.
Do I Need to Take Action?
Shared and Reseller Hosting: No immediate action is required. However, customers running PHP 8.1 or older are encouraged to upgrade to PHP 8.2 or newer.
Managed VPS and Dedicated Servers: TotalChoice Hosting applies applicable security patches to managed systems. Due to differences in server configurations, we recommend reviewing your PHP installations to ensure they are properly updated.
TotalChoice Hosting remains committed to maintaining a secure and reliable hosting environment. We will continue to monitor security developments and apply updates as they become available to help protect our customers and their websites.
