Pagely has completed the deployment of PHP security updates across customer servers to address the recently disclosed critical remote code execution vulnerabilities. No further action is required from customers regarding this update. This advisory is now resolved.
Posted Oct 21, 2026 - 18:51 UTC
Update
Overnight, we deployed some mitigations, and we're building updated PHP containers with the full fixes now.
Posted Oct 21, 2026 - 14:34 UTC
Update
We are continuing to investigate this issue.
Posted Oct 21, 2026 - 14:21 UTC
Investigating
You may be aware of the recent critical PHP vulnerabilities (https://www.php.net/archive/2026.php#2026-10-21-5) that have a patch in progress from the PHP Development team. Pagely is well aware of this matter and will be applying the patched PHP versions to customer servers once it is available. No actions are needed from our customers on this PHP upgrade.
Further updates will be posted shortly.
Posted Oct 21, 2026 - 14:14 UTC
This incident affected: VPS Hosting Infrastructure and Shared Hosting Infrastructure.