Monitoring - Dear Customers,
We would like to bring to your attention two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may affect PHP installations on your servers.
If you are using a self-managed VPS or Dedicated Server, we recommend reviewing your installed PHP version and applying the relevant security updates as advised by your PHP distribution or operating system provider.
What you need to do:
Review the PHP versions installed on your server to determine whether they are affected.
If your installation is affected, apply the appropriate security updates following your operating system, control panel's recommendations.
If you are unsure how to proceed, consult your system administrator or contact our support team for guidance.
Please note: For self-managed VPS and Dedicated Servers, maintaining server software and applying security updates are the customer's responsibility.
We recommend addressing this advisory promptly to help protect your server and hosted websites from potential security risks.
Thank you for your attention and cooperation. Our support team is available to assist with any questions you may have.
Oct 22, 2026 - 15:59 AEDT
We would like to bring to your attention two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may affect PHP installations on your servers.
If you are using a self-managed VPS or Dedicated Server, we recommend reviewing your installed PHP version and applying the relevant security updates as advised by your PHP distribution or operating system provider.
What you need to do:
Review the PHP versions installed on your server to determine whether they are affected.
If your installation is affected, apply the appropriate security updates following your operating system, control panel's recommendations.
If you are unsure how to proceed, consult your system administrator or contact our support team for guidance.
Please note: For self-managed VPS and Dedicated Servers, maintaining server software and applying security updates are the customer's responsibility.
We recommend addressing this advisory promptly to help protect your server and hosted websites from potential security risks.
Thank you for your attention and cooperation. Our support team is available to assist with any questions you may have.
Oct 22, 2026 - 15:59 AEDT
Monitoring - All shared cPanel servers have now been successfully updated with the required security updates for the identified PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619.
We will continue to monitor the environment and provide further updates if required.
Thank you for your patience and understanding.
Oct 22, 2026 - 15:12 AEDT
We will continue to monitor the environment and provide further updates if required.
Thank you for your patience and understanding.
Oct 22, 2026 - 15:12 AEDT
Identified - Dear Customer,
We’d like to share an update regarding two recently identified critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619.
Protecting our customers’ websites and data is a priority. As a precaution, our security and infrastructure teams applied temporary security mitigations across our shared hosting servers on 21 October 2026 while the permanent fixes are being prepared.
How might this affect your website?
As part of these temporary security measures, some website functions may experience limitations, particularly:
Uploading larger files, such as images, videos and documents.
Submitting larger forms or importing data.
Restoring backups or performing website migrations.
Installing themes or plugins that require file uploads.
The impact may vary depending on your server and the functionality being used. Smaller uploads and routine website operations may continue to work normally.
What happens next?
Our teams are working with our software providers to deploy the appropriate security updates as soon as they become available. Once the permanent fixes are ready and installed, the temporary restrictions can be reviewed and removed.
We expect this process to take a few days, although the timeframe may vary depending on the PHP version and availability of the required updates. We’ll share further updates as more information becomes available.
We understand that these temporary limitations may cause inconvenience, and we appreciate your patience while we work to address the vulnerabilities. These measures have been implemented as a precaution to help maintain a secure hosting environment.
Thank you for your understanding and for trusting us to host your websites.
Our commitment remains the same: keeping your hosting environment secure while minimising disruption to your services.
Oct 22, 2026 - 00:49 AEDT
We’d like to share an update regarding two recently identified critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619.
Protecting our customers’ websites and data is a priority. As a precaution, our security and infrastructure teams applied temporary security mitigations across our shared hosting servers on 21 October 2026 while the permanent fixes are being prepared.
How might this affect your website?
As part of these temporary security measures, some website functions may experience limitations, particularly:
Uploading larger files, such as images, videos and documents.
Submitting larger forms or importing data.
Restoring backups or performing website migrations.
Installing themes or plugins that require file uploads.
The impact may vary depending on your server and the functionality being used. Smaller uploads and routine website operations may continue to work normally.
What happens next?
Our teams are working with our software providers to deploy the appropriate security updates as soon as they become available. Once the permanent fixes are ready and installed, the temporary restrictions can be reviewed and removed.
We expect this process to take a few days, although the timeframe may vary depending on the PHP version and availability of the required updates. We’ll share further updates as more information becomes available.
We understand that these temporary limitations may cause inconvenience, and we appreciate your patience while we work to address the vulnerabilities. These measures have been implemented as a precaution to help maintain a secure hosting environment.
Thank you for your understanding and for trusting us to host your websites.
Our commitment remains the same: keeping your hosting environment secure while minimising disruption to your services.
Oct 22, 2026 - 00:49 AEDT
About This Site
Welcome to the Crucial status page. This page keeps you up to date with any scheduled or unscheduled maintenance on our network.
Core Network
Operational
Blaze Cloud Platform
Operational
Virtual Server Platform
Operational
Web Hosting Services
Operational
Reseller Hosting Services
Operational
Crucial Website
Operational
Crucial Client Area
Operational
Help Centre
Operational
Phone Support
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance