On 21 October 2026, HJS Technology applied the official PHP security updates to all affected hosted websites on the same day they were released.
The patched releases were PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, addressing two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619
PHP 8.1 and earlier are no longer supported by the PHP project and do not receive standard security updates.
Customers using older PHP versions should plan to upgrade their website or application to a supported release.
All affected HJS Technology-hosted websites were patched promptly.
If you require any further information about the update, your website’s PHP version, or upgrading an older website, please contact HJS Technology.