On October 21, 2026, the PHP project released security fixes for two critical vulnerabilities: CVE-2026-109618 and CVE-2026-109619.
We have verified that Titan Hosting Hub's production PHP 8.2 and PHP 8.3 packages, along with our cPanel/WHM platform, contain the applicable fixes.
Server patching is separate from maintaining website applications, plugins and themes. Further reviews of hosted sites are ongoing. Please keep your website software up to date and contact support if you have questions about your site.
For technical details, read the official PHP security advisory.
Thursday, October 22, 2026
