Author Archive

Critical PHP Vulnerabilities 2026 – Secure Your Website

Critical PHP Vulnerabilities 2026 – Secure Your Website
0

Critical PHP Security Vulnerabilities 2026 – How to Protect Your Website

Critical PHP Security Vulnerabilities – Is Your Website Safe?

On October 21, 2026, two critical security vulnerabilities were disclosed in PHP, one of the most widely used programming languages powering websites worldwide. These vulnerabilities may affect hosting environments running WordPress websites, online stores, and custom web applications.

The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could potentially allow attackers to execute malicious code remotely on affected servers under certain conditions, even without prior authentication.

In this article, we explain the risks, identify which PHP versions have received security patches, and outline the steps website owners should take to protect their websites.

What Is PHP and Why Are Updates Important?

PHP is a server-side programming language responsible for many essential website functions, including generating dynamic content, processing forms, communicating with databases, and operating administration panels.

PHP powers popular platforms such as:

  • WordPress and WooCommerce,
  • PrestaShop,
  • Joomla,
  • Drupal,
  • Custom-built web applications.

Just like a computer operating system, PHP requires regular updates. New releases fix bugs, improve performance, and address discovered security vulnerabilities.

A website that appears to be functioning correctly is not necessarily secure. Running outdated PHP versions can expose websites and servers to unnecessary security risks.

Two Critical PHP Vulnerabilities – CVE-2026-109618 and CVE-2026-109619

On October 21, 2026, the PHP development team released security updates addressing two critical vulnerabilities.

Their potential impact includes Remote Code Execution (RCE).

If successfully exploited, these vulnerabilities could have serious consequences, including unauthorized access to server resources, modification of website files, or compromised data security.

For this reason, server administrators should immediately verify their installed PHP versions and check whether the appropriate security patches have been applied.

Which PHP Versions Include Security Fixes?

The official PHP project has released the following patched versions:

PHP Version Patched Release
PHP 8.2 8.2.35
PHP 8.3 8.3.36
PHP 8.4 8.4.27
PHP 8.5 8.5.12

Important: Hosting providers may also distribute security patches for older PHP versions.

For example, cPanel has released security updates addressing CVE-2026-109618 and CVE-2026-109619 for PHP 7.4, 8.0, and 8.1.

This means that an older PHP version may still contain fixes for these specific vulnerabilities if the hosting provider offers additional security maintenance.

However, relying on unsupported PHP versions over the long term increases security risks and makes website maintenance more difficult.

Are PHP 7.4 and PHP 8.1 Still Secure?

Official support for PHP 7.4 ended in November 2022, while PHP 8.1 reached its end of support in December 2025.

These versions no longer receive standard security updates from the PHP development team.

However, some hosting environments, including cPanel installations with additional security patches and services offering extended PHP security support, may continue to address selected vulnerabilities.

Nevertheless, we recommend gradually migrating older websites to actively supported PHP versions to maintain compatibility, performance, and long-term security.

Why Can’t You Simply Switch to a Newer PHP Version?

Updating PHP is not always as simple as changing a setting in your hosting control panel.

Older websites may contain code that is incompatible with newer PHP releases.

Common compatibility issues include:

  • Outdated WordPress themes,
  • Obsolete plugins and modules,
  • Deprecated or removed PHP functions,
  • Older content management systems (CMS),
  • Software requiring additional libraries, such as ionCube.

Changing the PHP version without proper preparation may result in website errors, broken contact forms, online store checkout failures, or even complete website downtime.

Therefore, before upgrading PHP, it is essential to create a backup, verify software compatibility, and thoroughly test the website.

ITserv Hosting – PHP Support Up to Version 8.5

At ITserv, we continuously maintain and update our hosting infrastructure to provide secure and modern web technologies.

Our hosting servers support PHP versions up to PHP 8.5, allowing websites to benefit from current environments and security updates.

We also maintain support for selected older PHP versions, enabling customers to gradually migrate websites that require additional compatibility adjustments.

However, it is important to understand that updating the server environment does not automatically update the website itself.

Ensuring that WordPress, themes, plugins, and custom code remain compatible with newer PHP versions requires proper website maintenance and administration.

How to Safely Update Your Website

We recommend following a structured process when updating PHP:

  1. Assessment – Identify the current PHP version and review the website’s software environment.
  2. Backup – Create a complete backup of website files and databases.
  3. Compatibility Check – Verify that the CMS, themes, plugins, and additional modules support the target PHP version.
  4. Upgrade – Update the website components and switch to a supported PHP release.
  5. Testing – Verify contact forms, login functionality, website features, and online store checkout processes.

Older websites may require additional code modernization or replacement of extensions that are no longer maintained.

Let ITserv Handle Your Website Security and PHP Updates

Not sure which PHP version your website is using? Concerned that upgrading PHP might cause your website to stop working?

ITserv provides professional website maintenance, security updates, and PHP migration services, including:

  • PHP environment analysis,
  • Complete website and database backups,
  • WordPress and plugin updates,
  • Legacy PHP code modernization,
  • Troubleshooting after PHP upgrades,
  • Website functionality and compatibility testing.

All website updates and modernization projects are individually priced according to the scope of work required.

Don’t put your website’s security at risk by postponing essential updates.

Contact ITserv to discuss securing and updating your website.

ITserv – Professional IT Services for Businesses

Website: www.itserv.pl

Email: kontakt@itserv.pl

Phone: +48 731 373 000

Sources

Article updated as of October 22, 2026. Vulnerability information is based on official PHP project and cPanel security announcements.

Microsoft 365 price increase from July 1, 2026. How can your company avoid higher costs?

Microsoft 365 price increase from July 1, 2026. How can your company avoid higher costs?
0

Microsoft has announced pricing changes for selected Microsoft 365 business plans starting from July 1, 2026. For many companies, this may mean higher monthly costs for Microsoft 365 licences, especially for popular business subscriptions such as Microsoft 365 Business Basic and Microsoft 365 Business Standard.

The good news is that companies can review their current licences in advance and secure more favourable pricing before the new rates come into effect. If your business already uses Microsoft 365 or is planning to purchase licences, it is worth making a decision before July 1, 2026.

What is changing in Microsoft 365?

Microsoft is updating the pricing of selected Microsoft 365 plans for business customers. The change applies mainly to commonly used plans for small and medium-sized businesses.

The price increase affects mainly:

  • Microsoft 365 Business Basic,
  • Microsoft 365 Business Standard.

According to Microsoft’s announcement, Microsoft 365 Business Premium is not included in this base price increase. However, it is still worth checking your current subscription type, renewal date and billing model.

Alongside pricing changes, Microsoft is also introducing additional value in selected plans, including larger mailbox limits. For many businesses, however, the most important practical point is this: from July 1, 2026, buying or renewing Microsoft 365 licences may become more expensive.

Why should you buy or renew Microsoft 365 before July 1, 2026?

If your company uses Microsoft 365 continuously, purchasing or renewing licences before July 1, 2026 may help you avoid the new, higher rates for the duration of your subscription term.

In practice, this means that an annual commitment can help secure the current price for a longer period. This is especially important for companies that know they will continue using Microsoft 365 for the next 12 months and do not expect a significant reduction in the number of users.

It is worth reviewing your Microsoft 365 licences before July 1, 2026 if:

  • your company already uses Microsoft 365,
  • your current subscription is approaching renewal,
  • you are planning to buy new licences,
  • you currently use monthly commitment and want to reduce the impact of the price increase,
  • your number of users is relatively stable,
  • you want to plan Microsoft 365 costs for the next year.

Annual commitment can help secure your price

For many companies, the most cost-effective option may be switching to an annual commitment before the new prices take effect. This allows the company to use the current terms for the full subscription period.

Popular options include:

Billing option Best for Main benefit
Annual commitment, annual payment Companies with a stable number of users Maximum cost predictability
Annual commitment, monthly payment Companies that prefer monthly payments Price secured for one year without paying the full year upfront
Monthly commitment Companies with frequent user changes More flexibility, usually at a higher cost

If you are not sure how many licences you will need for the next 12 months, a mixed model may be the best solution. Core users can be covered by annual commitment, while additional or temporary users can remain on monthly commitment.

Example: annual licences for core users, monthly licences for additional users

A practical approach works well in many companies. For example, if a company has 15 permanent employees and occasionally hires additional people, it can:

  • purchase 15 core licences with annual commitment,
  • keep additional licences on monthly commitment,
  • regularly review active and unused accounts.

This approach helps reduce the impact of the price increase on the licences that are used all year round, while still keeping flexibility where the number of users may change.

Do not wait until the last day

The new Microsoft 365 pricing takes effect on July 1, 2026, so it is better not to leave the decision until the last moment. Before buying or renewing licences, it is worth checking:

  • how many licences are currently active,
  • how many licences are actually used,
  • whether there are unused or unnecessary licences,
  • what commitment type is currently active,
  • when your current subscription renews,
  • whether annual or monthly commitment is the better option.

A licence review can help avoid paying more not only because of the price increase, but also because of unused accounts or incorrectly selected plans.

ITserv can help you secure Microsoft 365 pricing before the increase

ITserv helps companies choose, purchase and renew Microsoft 365 licences. We can review your current Microsoft 365 environment, check the number of active accounts, verify your subscription type and recommend the most suitable billing option.

We can help with:

  • purchasing and renewing Microsoft 365 licences,
  • switching between monthly and annual commitment,
  • choosing Business Basic, Business Standard or Business Premium,
  • identifying unused accounts and licences,
  • migrating email to Microsoft 365,
  • configuring Exchange Online, Teams, OneDrive and SharePoint,
  • securing user accounts,
  • Microsoft 365 backup,
  • ongoing Microsoft 365 administration.

Summary

From July 1, 2026, Microsoft is introducing new prices for selected Microsoft 365 business plans. For companies using Microsoft 365, this is a good time to review licences and make a decision before the price increase takes effect.

If your company will continue using Microsoft 365 for the next 12 months, it is worth considering purchasing or renewing licences with annual commitment before July 1, 2026.

Contact ITserv — we will review your current licences, compare billing options and help you secure the best possible Microsoft 365 pricing before the increase.

Ostatnie artykuły