Announcements

PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619

  • 21st October 2026
You may be aware that two critical vulnerabilities were disclosed in PHP today affecting all versions from 5.x through 8.x. These vulnerabilities allow for arbitrary remote code execution and are deemed critical. All NitroHost servers are now running patched versions of PHP, including backported fixes for PHP 5.x and 7.x. Additionally WAF (Web ...
Continue reading