ServerFreak has applied security patches for CVE-2026-109618 and CVE-2026-109619 across all shared hosting servers, covering PHP versions 5.2 and above.
Applicable security patches have also been applied to managed server environments running PHP 8.2 and above. Customers using Imunify360 on their own servers should ensure the relevant security patches are installed for their PHP packages.
These security fixes are delivered through CloudLinux and Imunify360 packages, which may use backported patches without changing the displayed PHP version number.
For more information, please refer to the official CloudLinux security advisory:
https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5
Customers using self-managed servers are advised to ensure their PHP installations have received the applicable security updates.
ServerFreak Technologies Sdn Bhd
