Our PHP provider (CloudLinux) applied the October 2026 security fix without changing the version number. So your site may still show something like 8.5.11 instead of 8.5.12, even though the fix is in place. This is because CloudLinux added their own patches ( Including old PHP Versions that PHP themselves did not patch ). At the end of this, we will list the servers that are still being updated.

To check, look at the build date rather than the version number. If PHP was built on 21 October 2026 or later, it’s patched.

How to see the build date:

Through cPanel/Direct Admin: create a file named info.php with the following contents, open it in your browser, and look for Build Date near the top. Delete the file afterwards.

<?php
phpinfo();
?>

If your build date is older than 21 October, please open a ticket.

If the build date is younger than that, don't panic too much as the servers are further protected by Immunify360 or CPGUARD, both of which has the vulnerability covered.

You don’t need to take any action. All updates are applied for you.

Servers currently still being updated :
1 ) UK Direct Admin ( darwin server )