PHP Security Patching Completed — DirectAdmin & cPanel Servers (PHP2Shell)
We are pleased to let you know that critical security patching for the recently disclosed PHP vulnerabilities (CVE-2026-109618 & CVE-2026-109619) has been completed across all of our DirectAdmin and cPanel hosting...
We are aware of the recently reported PHP vulnerabilities and are actively working on mitigation across our hosting environment, including applying available security updates and coordinating with our software vendors.
Our team is already addressing this, so there is no need to submit a...
I feel your pain Jason, it's been a game of ping pong all month as you mentioned.
Lets hope for the best over the Nov/Dec period so that we can all get some much deserved time off.
If you cannot update yet, PHP's own interim measures are session.upload_progress.enabled=0 in php.ini or the FPM pool (then restart every worker), memory_limit=-1 set so applications cannot override it, and a low post_max_size (8M, or 32M if you need uploads). On PHP 8.5 also set...
Mitigation whilst you patch :
disable session.upload_progress.enabled on all versions of php
https://www.php.net/archive/2026.php#2026-10-21-5
https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities
https://nvd.nist.gov/vuln/detail/cve-2026-109618...
I think start with the suggestions that have been made within this thread and see if the abuse and complaints stop, else reword it more to include (No Free Domain Registration)
I can see how the words connect a domain could be misinterpreted by someone that isn’t clued up on how domain names and hosting work, so my suggestion is to change Connect Domain to Connect Existing Domain or Connect Registered Domain
This issue has been resolved and the underlying issue documented and sent to our vendor for further investigation and resolution.
Have an awesome weekend and may the bokke win
The scheduled upgrades to our Client Service Area have been completed successfully, and all services are now available.
Should you experience any issues following the upgrade, please create a support ticket through the Client Service Area so that our team can assist.
Thank you for your...