Thank you for your patience during this essential security works.
Posted Oct 21, 2026 - 22:37 BST
Update
We are continuing to wait for the relevant updates to become available in CloudLinux. We will update this page once a meaningful update becomes available.
Posted Oct 21, 2026 - 19:00 BST
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 21, 2026 - 15:00 BST
Scheduled
We have taken our PHP-based web services offline today as a precaution. Today the PHP project released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2). Both can allow an attacker to run code remotely, without logging in, on any server that uses PHP to handle web requests.
These services are unavailable while we patch and check each system: - Client area and billing (console.clouvider.co.uk) - VPS control panel - Website and online ordering
Your services are not affected. Our network and all dedicated servers, virtual servers and colocation continue to run normally. This work does not touch customer infrastructure.
Support is still available by email at [support address]. No service will be suspended for non-payment while the client area is offline.
IF YOU RUN PHP ON YOUR SERVER Our servers are unmanaged, so please update your own PHP installations now. - The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Most Linux distributions already have patched packages. - PHP 8.1 and older get no fixes from the PHP project. Check with your distribution or LTS vendor, or upgrade. - The Remi repository will not have updates today. - If you can't patch straight away, stop PHP or your web server, or block ports 80 and 443 at your firewall, until you can. This is safer than powering the server off, because it will be exposed again as soon as it boots, until it is patched.