Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

Business email hosting on your own domain

Email on your own domain, included with your hosting rather than billed per mailbox. Set up as many addresses as your plan storage allows, and read them anywhere.

Deliverability

Three records that decide whether you land in the inbox

Most "my email goes to spam" problems are DNS problems, not server problems. Receiving providers check whether the mail really came from your domain, and they check it with records you publish yourself.

SPF

Lists the servers allowed to send mail for your domain. Publish one SPF record that covers Skyrack and any other service that sends as you, such as a newsletter tool or an accounting package.

DKIM

Signs each outgoing message with a key that receiving servers check against your DNS. It proves the message was not altered on the way and that it came from your domain.

DMARC

Tells receiving servers what to do when SPF or DKIM fails, and asks them to report back. Start in reporting mode, read what comes in, then tighten the policy once your legitimate senders all pass.

SPF, DKIM and DMARC explained

Email hosting FAQ

Questions we get asked

How much email storage do I get?

Mailboxes share the storage on your hosting plan with your website files. If you are on a 10GB plan, whatever your site is not using is available for email. You set a quota per mailbox in cPanel, so one account cannot quietly consume the lot. If you need far more email storage than our plans carry, contact us and we will price a custom solution.

Can I move my existing mailboxes across?

Yes. When we migrate a cPanel account we bring the mailboxes and their contents with it, along with forwarders and autoresponders, at no charge and with no downtime. If your mail is on a provider that is not cPanel, tell us what you are on and we will work out the best way to move it. See how our migrations work.

Is email included on VPS and reseller plans too?

Email hosting with unlimited mailboxes is included with our WordPress and cPanel plans. Reseller and VPS plans run cPanel and WHM as well, so you can create mail accounts under the cPanel accounts you provision on them. Reseller hosting starts at $44.98/month and VPS hosting at $199/month.

My mail is going to spam. What should I check first?

Check SPF and DKIM before anything else. A missing DKIM signature or an SPF record that does not list every service sending as your domain is the usual cause. After that, look at the content of the mail itself and whether the sending address matches the from address. Our Australian support team can look at the records with you if you are not sure what you are reading.

Email and hosting on one plan

cPanel hosting from $4.98/month, with unlimited mailboxes on your domain, hourly backups and free migration.

See cPanel hosting plans