Previous incidents
Critical NodeJS Vulnerabilities (CVE-2026-105483, CVE-2026-106069, CVE-2026-1...
Resolved Oct 22, 2026 at 7:20pm UTC
Security updates for the previously outstanding Node.js 16, 18 and 20 packages, and the cPanel-provided Node.js 22 package, are now available from our upstream providers.
We have completed the rollout of these security updates and restarted applications using the old versions where they can restart automatically.
2 previous updates
Critical PHP Security Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
Resolved Oct 22, 2026 at 7:17pm UTC
The security fixes have been backported into the existing PHP releases, so the version number shown in cPanel, phpinfo() or WordPress Site Health won't change.
Servers will still report the same PHP version (5.2–8.5) as before, but are running the fixed build. There's no need to change your PHP version or contact us to confirm your site is protected.
4 previous updates