Back to overview
Degraded

Critical PHP Vulnerabilities – Mitigation and Patching Underway

Oct 21, 2026 at 7:57am UTC
Affected services
Stack CP (Hosting Control Panel)

Created
Oct 21, 2026 at 7:57am UTC

We are aware of reports of critical vulnerabilities affecting PHP that may pose a security risk to websites and applications running affected versions.

Our team has implemented initial mitigation measures across the Web Hosting estate to help reduce potential exposure. We are actively monitoring the situation and preparing to apply the relevant security patches as soon as they become available.

We will continue to assess the risk, review available mitigations, and take appropriate action to protect our services. While the initial mitigations provide an additional layer of protection, they should not be considered a complete fix.

We will update this status page as further information becomes available and as additional mitigation and patching measures are implemented.

Update 16:00 UK Time:
Patches have been released and we will be rolling this out with our platform teams as soon as possible.