We have completed the PHP security update across our entire shared hosting fleet and our billing platform.
All PHP 8.2, 8.3, 8.4 and 8.5 branches in production now include the vendor fixes for the recently published PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (unauthenticated remote code execution). The web server and PHP-FPM services were restarted so that the patched builds are active, and we verified that every hosting server responds normally after the update.
No action is required on your side. If you notice anything unusual with your websites or with PHP after this update, please open a support ticket and we will check it right away.
— CoinsHosting Operations
