HahuCloud Security Notice — Update Your PHP Two critical PHP vulnerabilities (PHP2Shell — CVE-2026-109618 & CVE-2026-109619, rated 9.2/10) allow attackers to run code on a server without logging in. This affects PHP itself, so every PHP site should update as soon as the patched version is available. cPanel hosting customers: Go to cPanel → Select PHP Version (or MultiPHP Manager) and switch to a patched release as soon as it appears for your account. The fixed versions are 8.5.12, 8.4.27, 8.3.36, or 8.2.35 (or newer). If you run PHP on your own VPS: Update PHP through your package manager or control panel, then restart PHP-FPM / your web server. Confirm your version with php -v. On PHP 8.1 or older: Those versions are end-of-life and will not receive an official fix. Please upgrade to a supported branch (8.2–8.5). • https://www.php.net/archive/2026.php#2026-10-20-1 • https://laravel-news.com/php-critical-security-release