PHP vulnerability update

Incident Report for IgLou Internet Services

Identified

IgLou is aware of the critical PHP vulnerabilities announced yesterday (CVE-2026-109618 and CVE-2026-109619). PHP is a widely used programming language that powers a large portion of websites worldwide, so these issues can affect website hosting environments.

We have already applied temporary mitigations across all PHP versions on all of our website hosting servers. These protections are in place while we wait for upstream vendors to release the final patched PHP packages. We expect the updates to be fully deployed within the next 24 hours. Once all servers have received the permanent fixes, we will post a follow-up confirming completion.
Posted Oct 21, 2026 - 13:41 EDT
This incident affects: Website & Email Hosting.