21st October 2026

cPanel shared servers PHP security update — please review your website’s PHP version

Dear Customer,

We are responding to two critical PHP vulnerabilities that could allow attackers to run unauthorized code. Security updates are being deployed across our hosting platform, alongside additional firewall protection while patching continues.

cPanel has released security patches for PHP 7.4, 8.0 and 8.1, as well as newer supported branches. Earlier versions, including PHP 5.x,doesn't have a patch available presently. Applying the correct patch is essential for protection against these vulnerabilities.

PHP 5.x, 7.x, 8.0 and 8.1 no longer receive security updates directly from the PHP project. Vendor backports help address specific vulnerabilities, but we strongly recommend planning a move to a currently supported PHP branch for ongoing security maintenance and compatibility.

Please review your website’s PHP version and contact Support to plan a move to a compatible, supported version such as PHP 8.3 or 8.4. Back up your website, update its software, themes and plugins, and test compatibility before switching. The selected PHP version must also have the latest security patches.