{"id":10568,"date":"2026-10-22T14:53:35","date_gmt":"2026-10-22T12:53:35","guid":{"rendered":"https:\/\/clouding.io\/blog\/?p=10568"},"modified":"2026-10-22T14:53:36","modified_gmt":"2026-10-22T12:53:36","slug":"critical-vulnerabilities-php-protect-your-cloud-server-measures-taken-by-clouding","status":"publish","type":"post","link":"https:\/\/clouding.io\/blog\/en\/critical-vulnerabilities-php-protect-your-cloud-server-measures-taken-by-clouding\/","title":{"rendered":"Critical PHP vulnerabilities: how to protect your server and what Clouding has done"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>On 21st October 2026, two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed. They could allow attackers to execute malicious code remotely on affected servers<\/strong>. At Clouding, we want to explain the measures we have taken and reassure everyone who relies on our platform.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Our platform is protected<\/strong><\/h3>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">As soon as we learned of these vulnerabilities, we carried out an emergency security audit in addition to the many routine reviews and audits we regularly perform. <strong>Our platform does not use PHP in any critical systems, and we have already applied the relevant security updates and patches to the very few non-critical systems where PHP is used<\/strong>. Our platform is therefore updated and protected against these known vulnerabilities.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>What should you do if you use PHP on your server?<\/strong><\/h3>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">It is important to distinguish between the security of Clouding\u2019s infrastructure and the configuration and maintenance of each customer\u2019s server. Security measures applied to our platform do not automatically update PHP installations on customer-managed Cloud servers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>If you have a Clouding server and use PHP, we recommend that you:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Check your PHP version and upgrade to a secure release.<\/li>\n\n\n\n<li>Apply the relevant security patches as soon as possible.<\/li>\n\n\n\n<li>Enable backups or, at minimum, create a server snapshot as a precautionary recovery measure. These measures do not replace security updates.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><br>Our knowledge base explains how to set these up:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/help.clouding.io\/hc\/en-us\/articles\/13127579709852-How-to-activate-your-server-backups\"><strong>How to enable server backups<\/strong><\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/help.clouding.io\/hc\/en-us\/articles\/360010187360-Creation-of-a-Snapshot\"><strong>How to create a server snapshot<\/strong><\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><br>If you do not enable backups, at least download and store a full backup copy of your server outside the platform so that you have an additional copy available if an incident occurs.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>We can help you protect your server<\/strong><\/h3>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">We have prepared a guide in our Knowledge Base to help you check your PHP installation and apply the necessary security measures:<\/p>\n\n\n\n<div style=\"height:0px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/help.clouding.io\/hc\/en-us\/articles\/31231303610396-Detection-and-mitigation-of-PHP-vulnerabilities-CVE-2026-109618-and-CVE-2026-109619\"><strong>Guide to checking and mitigating the PHP vulnerabilities<\/strong><\/a><\/li>\n<\/ul>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Need help?<\/strong><\/h3>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">If you are a Clouding customer and need guidance or assistance from our Cloud Pros team, contact <a href=\"mailto:support@clouding.io\">support@clouding.io<\/a>. We remain committed to providing secure, stable and reliable Cloud infrastructure.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Official source<\/strong><\/h3>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.php.net\/archive\/2026.php#2026-10-21-5\">Official PHP security advisory (21 October 2026)<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On 21st October 2026, two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed. They could allow attackers to execute malicious code remotely on affected servers. At Clouding, we want to explain the measures we have taken and reassure everyone who relies on our platform. Our platform is protected As soon as we learned of these [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":9993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[385,414],"tags":[5895,474],"yst_prominent_words":[5647,5711,5672,1261,953,1463,4180,1568],"class_list":["post-10568","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualidad-en","category-usuarios-en","tag-php-2","tag-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/posts\/10568","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/comments?post=10568"}],"version-history":[{"count":3,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/posts\/10568\/revisions"}],"predecessor-version":[{"id":10571,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/posts\/10568\/revisions\/10571"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/media\/9993"}],"wp:attachment":[{"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/media?parent=10568"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/categories?post=10568"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/tags?post=10568"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https:\/\/clouding.io\/blog\/en\/wp-json\/wp\/v2\/yst_prominent_words?post=10568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}