Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

cPanel Hosting
Melbourne


cPanel hosting for Melbourne agencies, retailers and professional firms, served from our Sydney data centre with a Melbourne node on our DNS network. Hourly off-site backups and free migration are included.

Reliable cPanel hosting for business websites

Melbourne cPanel Hosting

Melbourne agencies and freelancers often host client sites alongside their own, and professional firms want a mailbox for every staff member. cPanel hosting suits both: add domains and email accounts yourself, give a developer their own FTP user, and keep each project organised in one account.

If you need to host many separate client accounts, our reseller plans are worth a look. Accounts run on LiteSpeed with Enterprise SSD storage in our Sydney data centre, and hourly off-site backups let you roll a site back after a bad deployment. Our DNS network has a Melbourne node. Migration from your current cPanel host is free, support comes from our Australian team by email, chat or call-back request, and there are no lock-in contracts.

Included with every plan

  • Australian Based Data centres
  • Leading Servers and Infrastructure
  • Australian Support Team
  • Free Migrations From Existing Web Host
  • Automatic Hourly Off-Site Backups
  • Built-In Virus and Malware Scanning
  • WP Toolkit Included on All Accounts
  • 30-Day Refund on Hosting Plans

Hosting for Melbourne businesses

A DNS node in Melbourne

Skyrack runs DNS nodes in Sydney, Melbourne, Perth and Adelaide. The Melbourne node is one of four that answer for your domain.

Staging for busy teams

WordPress plans include WP Toolkit staging, so an agency or in-house team can test theme and plugin changes before they reach a live Melbourne storefront or campaign page.

Same clock as Sydney

Melbourne keeps the same time as Sydney all year, and our team operates between Sydney and Adelaide.

Let's get started, make the move today

Live in Melbourne but not sure which hosting plan is right for you? Get in touch with our team of experts

Contact us