Good evening,
New critical vulnerabilities for PHP versions 5 through 8 have been publicly announced this morning. We won't get into the specific details over the vulnerabilities here, however, as has been reported even on some major news outlets, this vulnerability has the potential to allow an attacker to execute any code they want on a server or PHP application if found.
The good news - all ExiaHost servers have been patched this morning and affected versions of PHP are no longer in use on our fleet of servers. No action is required at this time.
We always recommend periodically reviewing your hosted applications that use PHP to ensure you are using software that supports the latest versions of PHP, as these receive bug and security updates.
As always, if you have any questions, please feel free to open a support ticket in the client portal and we'll be happy to help out!
-Chris
Thursday, October 22, 2026
