IPv4 or IPv6? For your server, the real question is: can everyone reach it? Both are just addresses that let machines find each other. The difference that matters: → IPv4 (203.0.113.5) — the original. Reachable from everywhere, but the world ran out of them. → IPv6 (2001:db8::1) — created because IPv4 ran out. Practically unlimited, preferred by modern networks, but not every network speaks it yet. They don’t talk to each other directly, so the internet runs both, and will for years. That’s why the smart setup is both: IPv4 so no one’s locked out, IPv6 so you’re current. Doprax VMs come with a dedicated IPv4 and IPv6 support out of the box. Need more? Add up to 5 extra IPv4 per VM. Full explainer: https://www.doprax.com/blog/ipv4-vs-ipv6-what-you-actually-need-to-know

🚨One more critical security alert. Patch these if you run them: GitLab, PHP, Node.js. All three allow code execution without logging in. Ordered by urgency: 🔴 GitLab (self-managed) — CVSS 10.0, the top priority Unauthenticated RCE, every self-managed version affected, no workaround. A public project with a crafted file is all it takes. → Update to 19.5.1 / 19.4.3 / 19.3.6 / 19.2.9 / 19.1.9 / 19.0.10, or 18.11.13 → GitLab’s hosted service is already patched 🔴 PHP — 9.1, exploit already circulating → 8.5.12 · 8.4.27 · 8.3.36 · 8.2.35 🟠 Node.js — High (Brotli RCE flaw, CVE-2026-111497) fetch() and Express 5 auto-decompress Brotli, so you can be exposed without using it directly. → 26.12.1 · 24.22.1 · 22.23.4 Running in containers? Rebuild from an updated image, apt upgrade won’t fix them. On an EOL version? No fix is coming, move to a supported release. Full checklist: https://www.doprax.com/blog/critical-vulnerabilities-you-need-to-patch-now

🚨 Critical PHP flaws are being actively exploited. If you run PHP, patch right now. CVE-2026-109618 and CVE-2026-109619 (rated 9.1/10) let an attacker run code on your server with a single request, no login needed. A working exploit already exists, so this is urgent. Patched versions are out. Update to: → PHP 8.5 → 8.5.12 → PHP 8.4 → 8.4.27 → PHP 8.3 → 8.3.36 → PHP 8.2 → 8.2.35 How: → Check yours: php -v → sudo apt update && sudo apt upgrade → Restart PHP-FPM and your web server, confirm with php -v → Container? Rebuild from an updated base image → On PHP 7.4/8.0/8.1? Move to a supported 8.x branch Not running PHP (Node, Python, Go, databases)? This one’s not yours. Full guide: https://www.doprax.com/blog/critical-php-rce-vulnerabilities-what-to-do Original source: https://www.php.net/archive/2026.php PS: Node.js also needs to be updated. Source: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases