Change log
Every security update, fix, deploy and change to the settings or infrastructure of our services, newest first. Each also shows in the day bars of every service it touched, in its kind’s colour.
Service:Technical support✕
21 October 20261 change
- Vulnerability fixMitigated13:08
CloudLinux released Imunify360 protection rules (ruleset 8.83) to block known exploit attempts.
Running CoreVPS serverscPanel hostingIllevante websiteHelp centerTechnical supportIllevante community
20 October 20262 changes
- Vulnerability fixBeing applied23:35
The PHP Security Team announced an emergency security release for the two vulnerabilities.
Technical supportIllevante communityHelp centerIllevante websitecPanel hostingRunning CoreVPS servers
- Vulnerability fixBeing applied23:30
Critical PHP vulnerabilities (PHP2Shell): CVE-2026-109618 and CVE-2026-109619
Two critical PHP vulnerabilities (CVSS v4 9.2) allowed remote code execution without authentication. They affected every PHP setup that serves websites. We have updated all PHP versions on our hosting servers, and shared hosting customers do not need to take any action.
cPanel hostingIllevante websiteHelp centerIllevante communityTechnical supportRunning CoreVPS servers