All Systems Operational
All Sentinel Infrastructure services are running normally. Hosting, email, control panels and websites are fully available. We will publish notices on this page if any incidents or scheduled maintenance arise.
Security response: PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
We are responding to two critical security vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619), which affect websites across the industry. Our team is applying protective measures and security updates across all of our hosting platforms.
Some of these measures change how PHP behaves, so a small number of websites may notice differences in how they work. We apologise for any disruption. These changes are needed to keep your services secure.
Please note that after these security updates, the PHP version shown for your website may not match the latest version numbers listed on PHP.net or reported elsewhere online.
This is expected. The updates use a process called backporting: the fixes for these specific vulnerabilities are applied directly to your current version of PHP, without introducing any other changes or updates. Your website is protected even though its PHP version number has not changed.
The security update rollout is now complete. All of our hosting servers have been patched against CVE-2026-109618 and CVE-2026-109619, including those running older versions of PHP. Every website we host is protected, and you do not need to take any action.
Because PHP runs at server level, we were able to protect every website we host with a single update. Most security issues affecting WordPress websites are different: they are found in individual plugins and themes, and are only fixed when someone updates that site. Our website maintenance plans keep WordPress, plugins and themes up to date, monitor for new vulnerabilities, and include regular backups.
We still recommend running PHP 8.2 or higher, as older versions no longer receive regular updates from the PHP project. If you are on one of our maintenance plans, we will move your website to a newer version for you. Otherwise, you can change your PHP version in your control panel, or contact us and we will help.
Thank you for your patience. If you have any questions, please contact our support team.
The security updates for our cPanel hosting platforms have been released by our software vendor, and we have begun rolling them out.
We are continuing to apply security updates as soon as our software vendors release them. Updates for our cPanel hosting platforms are expected at around 01:00 BST, and we will begin applying them as soon as they are available.
Please note that security updates are only being provided for PHP 7.4 and later. If your website runs an older version of PHP, please upgrade as a matter of urgency, or contact us and we will help.
Protective measures, including firewall (WAF) rules, remain in place in the meantime.
Protective measures are now in place wherever they are available, and we are installing security updates as they are released.
What you need to do: please make sure your website is running PHP 8.2 or higher. Older PHP versions are no longer supported and are at greater risk. You can check and change your PHP version in your control panel, or contact us and we will help.
Maintenance plan clients: you do not need to do anything. We will update your website's PHP version for you automatically.
If you have any questions, please contact our support team.
We are aware of two critical security vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) and our team is responding. We are applying protective measures and security updates across all of our hosting platforms.
Some of these measures may change how PHP behaves, which could affect how some websites work. We apologise to anyone affected. These changes are necessary to keep your services secure.
Our support team is available to help with any questions. Please contact us in the usual way.
Experiencing an issue not listed here?
If you are seeing a problem with your service that is not reflected on this page, please get in touch and our team will investigate.
Contact Support →