When two critical PHP vulnerabilities prompted urgent action across the hosting industry, Netcom focused on protecting customer websites while keeping services available.
PHP powers many websites and online applications. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, required hosting providers to apply security updates.
The BBC reported on organisations taking websites offline as they responded, while the UK’s National Cyber Security Centre urged affected organisations to act. Read Here
For our customers, our response meant continued connectivity while we completed the security work.
Working Through the Updates
Our team worked tirelessly to track releases from PHP and cPanel. We followed package availability closely and checked the fixes relevant to the PHP versions installed on our hosting server.
Installing updates formed one part of the work. We also compared installed the PHP packages against published patched builds and checked the active package changelog for both vulnerability references.
Keeping Websites Available
Throughout our response, we kept customers connected while applying the relevant updates.
We used a graceful web server restart, restarted the services and triggered the renewal of PHP packages. These steps supported the transition to the updated software while maintaining service availability.
Our approach brought together security patching, package verification and service management. We followed the work through beyond the installation stage.
What This Means for Our Customers
The PHP environments we checked on our hosting server now include fixes for both reported vulnerabilities. Customers did not need to install these server updates themselves.
This response reflects the work behind managed hosting. Our customers rely on us to follow security developments, assess their relevance and take action while keeping their businesses online.
We are proud of our team’s dedication during this issue. Thank you to our customers for your continued trust in Netcom.
BBC News: Websites taken down worldwide as critical PHP cyber-security update issued
PHP: Official security advisory and release announcements
National Cyber Security Centre: Critical security issue affecting PHP