← Latest engineering works and warnings
● Resolved

PHP security update: some services were briefly unavailable

● Reported

We installed an emergency PHP security update that fixes two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619, known as "PHP2Shell"). Applying it required restarting our PHP services.

What we did
We updated PHP to a fixed version (8.5.12) and restarted all services. Everything is working normally again.

We apologise for the inconvenience.