kCore Cloud

Today PHP announced two security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting the language core. Patches are expected to be released later today, and we'll apply them as soon as they're available. Applying the fix requires a full system reboot rather than a simple service restart, so please expect up to 5–10 minutes of downtime while we patch and bring everything back up. We'll confirm the maintenance window as soon as the patches land, and we'll follow up once it's complete. No action is required on your end, just plan for that brief interruption.

Update 18:45 ET: Patches are now available and we are applying and rebooting. Please reach out via livechat or open a ticket with any questions.