We continue to monitor the situation. The bulk of our customer servers were patched automatically. We will continue to work with customers to upgrade any legacy systems.
Posted Oct 22, 2026 - 13:49 BST
Monitoring
We have applied the patch to all applicable servers.
For customers running server versions that are too old to receive the patch, we will be in contact in due course. In the meantime, mitigations have been put in place to prevent the vulnerability from being exploited.
Posted Oct 21, 2026 - 19:36 BST
Update
A patch has been released and we are applying this to all applicable customer systems.
Posted Oct 21, 2026 - 16:30 BST
Identified
We are aware of the current 'PHP2Shell' vulnerability. We are awaiting the release of the patch, expected today (Wednesday) or tomorrow (Thursday).
When this is validated we will apply this automatically across our customer base. In the meantime we are also applying additional mitigations across our customers' servers.
If you are a hosting customer you should reach out to your web developers as soon as possible to confirm that your application supports PHP version 8.2 or above.
Posted Oct 21, 2026 - 14:46 BST
This incident affected: Managed Hosting Services (Dublin (Managed Hosting), London (Managed Hosting)).