Your website is an important part of your business. It helps customers find you, learn about your services, make purchases, and get in touch. But keeping a website online also means keeping the technology behind it secure.
Recent reports have raised concerns about two critical security vulnerabilities affecting PHP, a widely used technology that powers websites and web applications around the world.
According to MyBroadband, more than 9,800 internet-connected servers in South Africa were identified as running PHP, bringing attention to the potential scale of the risk.
At 1-grid, we believe that helping customers succeed online also means helping them understand security risks that could affect their websites. Here is what has happened, why it matters, and what website owners should do next.
What is the PHP security vulnerability?
PHP is a programming language used to build and run many websites and web applications. It works behind the scenes, allowing websites to process information, handle forms, and provide interactive features.
On 21 October 2026, the PHP development team released security updates addressing two critical vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619.
Both vulnerabilities could allow an attacker to run their own code on the server remotely.
In simple terms, this means an attacker could potentially gain the ability to run their own commands on a vulnerable server without first logging in through the website’s normal login process. Depending on the system and its configuration, this could put websites, applications and information stored on affected systems at risk.
The vulnerabilities have been rated critical, with a severity score of 9.2 out of 10. Security researchers have also reported a sharp increase in attempted exploitation following public disclosure, making prompt updates particularly important.
You can read the official PHP security advisory for the technical details.
Does this mean South African websites have been hacked?
Not necessarily.
The number of servers identified in the MyBroadband report highlights how widely PHP is used, but identifying a server running PHP does not automatically mean that it is vulnerable, has been successfully attacked or has suffered a security breach.
The level of risk depends on factors such as the PHP version, how the server is configured, and whether the appropriate security updates have been applied.
However, the vulnerabilities are serious enough that website owners, developers, and hosting providers should not ignore them. Security updates are available, and any affected systems should be addressed as soon as possible.
The important takeaway is not to panic, but to take action.
What should website owners do now?
Whether you run a small business website, an online store, or a larger web application, there are several practical steps you can take to improve your website’s security.
-
Confirm that your PHP environment has been updated
This is the most important step for addressing these specific vulnerabilities.
The PHP team has released fixes for PHP versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Some older versions may receive security fixes through their software distributors or support providers, so the correct update depends on the environment in which your website runs.
If your website is hosted by a provider, contact them to confirm that the relevant security updates have been applied to your hosting environment.
How to manage PHP Extensions in cPanel
How to update PHP version on Plesk Linux
If you manage your own server, work with your system administrator or developer to identify the PHP versions in use and apply the appropriate fixes.
Updating a website’s plugins or changing its password alone will not fix a vulnerable PHP installation. The underlying software needs to be patched.
-
Keep your website software up to date
PHP is only one part of a website’s technology.
If your website uses WordPress, Joomla or another content management system, make sure the platform, themes, plugins and extensions are kept up to date as well.
Outdated website components can introduce additional security weaknesses, even after the underlying server has been updated.
Download updates only from trusted sources and ensure you have an appropriate backup before making significant changes.
Learn how to improve the security of your WordPress website
Learn how to improve the security of your Joomla website
-
Make sure you have recent backups
Backups cannot prevent security vulnerability from being exploited, but they can help you recover if your website is compromised, damaged, or taken offline.
Make regular backups of your website’s files and database and ensure that you know how to restore them if necessary.
Where possible, maintain a separate copy of your backups rather than relying exclusively on files stored in the same hosting environment as your website.
-
Strengthen access to your website
Good account security remains an important part of protecting your online presence.
Use strong, unique passwords for your website administration and hosting accounts. Enable multi-factor authentication wherever it is available and remove administrator accounts that are no longer needed.
Also, keep an eye out for unexpected changes to website files, unfamiliar administrator accounts, suspicious redirects, or other activity that you cannot explain.
These precautions are valuable layers of protection, although they do not replace the PHP security updates required to address the vulnerabilities discussed in this article.
-
Ask for help if you are unsure
Not every website owner has the technical knowledge or access needed to manage server software, and that is perfectly understandable.
If you use shared hosting or a managed website service, some of the technical maintenance may be handled by your hosting provider. If you manage a VPS or dedicated server yourself, you may need assistance from your developer or system administrator.
Do not attempt complicated server changes if you are unsure of the consequences. Contact the appropriate support team and ask for confirmation that the affected software has been secured.
What does this mean for 1-grid customers?
Your website’s security depends on several components working together, from the server software that runs your website to the applications and tools you use to manage it.
As your hosting partner, 1-grid wants customers to have the information they need to make informed decisions about their online security.
If your website is hosted with 1-grid and you are unsure whether any action is required for your hosting package, please contact our support team. We recommend explaining which website or hosting service you use and asking for guidance on the security measures relevant to your setup.
If you manage your own server or website code, make sure the relevant updates are applied by you or your technical team. If a developer manages your website, speak to them about checking the PHP version and keeping your website software up to date.
The goal is to ensure that the right person addresses each part of your website’s security, rather than assuming that one update or one security measure covers everything.
Website security is a shared responsibility
The latest PHP vulnerabilities are a reminder that online security requires ongoing attention. Software weaknesses can emerge even in widely used technologies, and the time between a vulnerability becoming public and attackers attempting to exploit it can be short.
Hosting providers have a role in maintaining the security of the infrastructure they manage. Website owners and developers also have a role in maintaining applications, applying updates, and protecting access to their websites.
For South African businesses, this matters because a website is often much more than an online brochure. It may support customer enquiries, online sales, bookings, and day-to-day operations.
Taking the time to check your website’s security now can help reduce avoidable risks and put you in a better position to respond when new threats emerge.
Do not assume your website has been compromised, but do not assume it is protected without checking either. Confirm that the appropriate updates have been applied, keep your website’s software maintained, and seek help from your hosting provider or developer when needed.
At 1-grid, we encourage all website owners to take their online security seriously. Staying informed and acting promptly are important steps towards keeping your website and your business online.