All PHP versions we offer on all servers (PHP 5.2–8.5) have already been patched to address CVE-2026-109618 and CVE-2026-109619. The patches were applied within 30 minutes of CloudLinux releasing them.

No action is required from you for these vulnerabilities. You can continue using your services as usual.