Dear Customer,

Two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619, have recently been disclosed. They may allow an unauthenticated attacker to execute code remotely and compromise hosted applications and data.

Genious Communications has deployed security patches for the following PHP branches installed in environments under its management: PHP 5.6, 7.0, 7.1, 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3, 8.4 and 8.5.

If you have a VPS or dedicated server without a server management plan, this intervention does not cover your server. Installing security patches is your responsibility and must be carried out by you, your system administrator or your technical service provider.

We urge affected customers to update the PHP versions used by their websites and applications without delay. If no patch is available for a version you use, migration to a patched and supported version is necessary. In that case, you should:

• check that your websites and applications are compatible with the target PHP version;
• upgrade your CMS, extensions and application code where necessary, then test them to ensure they work correctly;
• upgrade PHP and verify that the affected services are operating correctly.

Even where an older PHP branch has received patches for these two vulnerabilities, we recommend planning a migration to a supported version to receive future security updates.

Thank you for your vigilance and cooperation in maintaining the security of your websites and applications.

Kind regards.

Genious Communications (c) 2003 - 2026 - Tous droits réservés.

Nous suivre