Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

cPanel Hosting
Adelaide


cPanel plans run on LiteSpeed with Enterprise SSD storage in our Sydney data centre, supported by a team that operates between Sydney and Adelaide. Email, hourly off-site backups and free SSL come with every plan.

Reliable cPanel hosting for business websites

Adelaide cPanel Hosting

Adelaide is where Skyrack started, and cPanel hosting is the setup behind many of the small business, trade and professional sites we look after for South Australian owners. One cPanel login covers your website, your email accounts, your databases and your file backups, so a bookkeeper, web designer or office manager can all work in the same place without special tools.

Accounts run on LiteSpeed with Enterprise SSD storage in our Sydney data centre, with hourly off-site backups and free SSL. Part of our team is in Adelaide, and you can chat, email or request a call-back from the people who run the servers. Migration from your current host is free, and plans are month to month with no lock-in contract.

Included with every plan

  • Australian Based Data centres
  • Leading Servers and Infrastructure
  • Australian Support Team
  • Free Migrations From Existing Web Host
  • Automatic Hourly Off-Site Backups
  • Built-In Virus and Malware Scanning
  • WP Toolkit Included on All Accounts
  • 30-Day Refund on Hosting Plans

Hosting for Adelaide businesses

Part of the team is in Adelaide

Skyrack started in Adelaide, and our team operates between Sydney and Adelaide. Chat, email or ask for a call-back to reach us.

A DNS node in Adelaide

Skyrack runs its own DNS network with a node in Adelaide, so lookups for your domain are answered close to home as well as from Sydney, Melbourne and Perth.

Sites for local organisations

Clubs, schools, cellar doors and trade businesses often share a site between a few volunteers or staff. Separate email, FTP and WordPress users, and WP Toolkit, keep that manageable.

Let's get started, make the move today

Live in Adelaide but not sure which hosting plan is right for you? Get in touch with our team of experts

Contact us