Critical PHP vulnerabilities CVE-2026-109618 / CVE-2026-109619 - release 21 October 2026, 16:00 UTC+2
Subscribe
Identified - We have proactively deployed a ModSecurity blocking rule to mitigate the publicly circulating exploit pattern associated with CVE-2026-109618 and CVE-2026-109619, targeting PHP's session upload progress handling in multipart HTTP requests.
This mitigation has been rolled out across our Shared Hosting, Managed Dedicated Servers, and Managed VPS environments as an additional layer of protection.
Important: This mitigation is a temporary protective measure and does not constitute a complete fix for the underlying vulnerabilities. It does not replace the need to upgrade PHP to the patched versions as soon as they become available.
We are closely monitoring the situation and will continue taking the necessary steps to protect our hosting infrastructure and customers.
Oct 21, 2026 - 15:36 CEST
This mitigation has been rolled out across our Shared Hosting, Managed Dedicated Servers, and Managed VPS environments as an additional layer of protection.
Important: This mitigation is a temporary protective measure and does not constitute a complete fix for the underlying vulnerabilities. It does not replace the need to upgrade PHP to the patched versions as soon as they become available.
We are closely monitoring the situation and will continue taking the necessary steps to protect our hosting infrastructure and customers.
Oct 21, 2026 - 15:36 CEST
Investigating - The PHP Security Team has announced an upcoming security release scheduled for Wednesday, 21 October 2026 at 16:00 UTC+2.
It addresses two critical vulnerabilities, publicly reported as CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2 (Critical).
Technical details and affected versions are scheduled to be disclosed at that time.
We will post updates here as more information becomes available.
Official announcement:
https://www.php.net/archive/2026.php#2026-10-20-1
Oct 21, 2026 - 11:45 CEST
It addresses two critical vulnerabilities, publicly reported as CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2 (Critical).
Technical details and affected versions are scheduled to be disclosed at that time.
We will post updates here as more information becomes available.
Official announcement:
https://www.php.net/archive/2026.php#2026-10-20-1
Oct 21, 2026 - 11:45 CEST
About This Site
This page provides real-time updates on the status of Libyan Spider's services, including incidents, maintenance, and system performance. Stay informed about any disruptions or planned updates. For further assistance, contact our support team.
Core Services
Operational
Clients Portal
Operational
Help Desk
Operational
LibyanSpider.com
Operational
DNS Services
Operational
Phone System
Operational
Domains & Registrar Services
Operational
Domain Search & Availability
Operational
Domain Registration & Renewal
Operational
Nameserver Updates (Delegation)
Operational
Registry Connectivity (EPP / Gateway)
Operational
Network
Operational
Tripoli
Operational
Falkenstein
Operational
Helsinki
Operational
Amsterdam
Operational
Frankfurt
Operational
Dedicated Servers
Operational
Tripoli
Operational
Falkenstein
Operational
Helsinki
Operational
Cloud Virtual Private Servers
Operational
Tripoli
Operational
Falkenstein
Operational
Helsinki
Operational
Web Hosting Services
Operational
Tripoli Data Center
Operational
Falkenstein Data Center
Operational
Helsinki Data Center
Operational
APIs
Operational
Domains Reseller API
Operational
Plutus API
Operational
JPaaS
Operational
JPaaS Clients Dashboard
Operational
JPaaS Core Services
Operational
LS Cloud
Operational
LS Cloud Clients Portal
Operational
LS Cloud API
Operational
LS Cloud Core Services
Operational
Cloudflare
Operational
Cloudflare Zone Versioning
Operational
Cloudflare API
Operational
Cloudflare CDN Cache Purge
Operational
Cloudflare CDN/Cache
Operational
Cloudflare Dashboard
Operational
Cloudflare DNS Root Servers
Operational
Cloudflare DNS Updates
Operational
Cloudflare Firewall
Operational
Cloudflare Gateway
Operational
Cloudflare Health Checks
Operational
Cloudflare Infrastructure
Operational
Cloudflare Load Balancing and Monitoring
Operational
Cloudflare Logs
Operational
Cloudflare Network
Operational
Cloudflare Page Shield
Operational
Cloudflare Recursive DNS
Operational
Cloudflare Rules
Operational
Cloudflare Security Center
Operational
Cloudflare Speed Optimizations
Operational
Cloudflare SSL for SaaS Provisioning
Operational
Cloudflare SSL Certificate Provisioning
Operational
Cloudflare Support Site
Operational
Cloudflare Tunnel
Operational
Cloudflare User Profiles
Operational
Cloudflare Turnstile
Operational
Cloudflare Waiting Room
Operational
Cloudflare WARP
Operational
Cloudflare Workers
Operational
Cloudflare Workers Preview
Operational
Cloudflare Zero Trust Dashboard
Operational
Cloudflare Zero Trust
Operational
Cloudflare Zaraz
Operational
Cloudflare WebSockets
Operational
Cloudflare Web Analytics
Operational
Cloudflare Radar
Operational
Cloudflare Pages
Operational
LS Suite
Operational
LS Suite Health
Operational
Webmail
Operational
SMTP
Operational
MX01
Operational
MX02
Operational
IMAP
Operational
POP
Operational
Email Delivery
Operational
Control Panel
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance