Ensuring the security of our clients’ websites is part of our daily commitment.

On October 21, 2026, the PHP development team disclosed two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to as PHP2Shell.

Under certain conditions, these vulnerabilities could allow an attacker to execute malicious code on a server without authentication. Both vulnerabilities have a severity rating of 9.2 under the CVSS v4.0 scoring system.

Official security advisories and technical guidance:

What Have We Done at FindDomain.ge?

Following CloudLinux’s official technical recommendations, our technical team has implemented the relevant security measures.

1. PHP Package Updates

The relevant alt-php and ea-php packages were updated from the CloudLinux repositories. These packages support PHP environments used by PHP Selector and cPanel.

2. Restarting PHP Processes

Following the updates, the relevant web server and PHP-FPM services were restarted to ensure that running processes use the updated PHP binaries.

3. Verifying Security Fixes

CloudLinux recommends verifying the security fixes by checking the changelogs of the relevant PHP packages for references to the applicable CVE identifiers.

This is particularly important because CloudLinux backports security fixes to existing PHP versions. As a result, the PHP version number may remain unchanged even when the relevant security fix has been applied.

FindDomain.ge continuously monitors security developments and official recommendations from its technology partners to ensure that necessary technical measures are implemented promptly.

What Does This Mean for Our Customers?

Security measures implemented at the server level help mitigate the risks associated with these vulnerabilities within our hosting environment.

However, website security depends on more than hosting infrastructure alone. Keeping website software—including CMS platforms, modules, and libraries—up to date and securely configured is also essential.

We recommend that our customers:

  • Use a PHP version that receives security updates and is compatible with their website.

  • Keep their CMS, modules, and software libraries up to date.

  • Use strong passwords and enable two-factor authentication wherever possible.

  • Maintain regular backups and periodically verify that they can be restored successfully.

  • Avoid untrusted software and code from unknown sources.

Security Is an Ongoing Process

FindDomain.ge continues to monitor official security advisories and recommendations from CloudLinux, cPanel, and PHP. Where necessary, we will implement additional technical measures in response to new recommendations and security updates.

Our goal is to provide our customers with reliable hosting, a secure environment, and professional technical support.

FindDomain.ge — Your Trusted Technical Partner for Digital Security.



Thursday, October 22, 2026



« Back