We are handling updates for managed Cloud Containers and will post an update once this work is finished. Because we are applying patches directly to the server, there will be a lag between the update happening and that change being reflected in the Control Panel.
For unmanaged Cloud Containers, we recommend that you update images as soon as possible.
Posted Oct 22, 2026 - 11:11 NZDT
Update
We recommend that customers running older PHP versions (PHP 8.1 or older) upgrade to a currently supported version as soon as possible. Older PHP versions that have reached end of life no longer receive security updates from the PHP project, potentially leaving websites exposed to known vulnerabilities.
We will be rolling out automatic image updates to Managed Cloud Container customers only. Customers using un-managed Cloud Containers can log in to the SiteHost control panel and manually update their container to the latest available image.
Posted Oct 22, 2026 - 08:38 NZDT
Identified
We have updated the Cloud Container images for PHP 8.2, PHP 8.3, PHP 8.4 and PHP 8.5 to address the security vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619.
We are now rolling out these updated images across our Cloud Container servers. Automatic updates may take some time to reach all customers.
If you would like to apply the update sooner, you can manually update your Cloud Container to the latest image version through the SiteHost control panel.
We will provide further updates as the rollout progresses.
Posted Oct 22, 2026 - 07:24 NZDT
This incident affects: Cloud Containers (NZ – AKL01, NZ – AKL02, NZ – AKL03, US – CAL01, UK – LDN01, SG – SGP01, AU – SYD01, DE - FRA01).