Website forms and file uploads temporarily unavailable

Incident Report for Webics

Postmortem

Please note that our provider, CloudLinux, applies these patches as backports and keeps the existing version numbers. As a result, the version number shown may appear lower than the official patched PHP release. For example, ea-php84 will show as 8.4.26 rather than 8.4.27, even though it includes the fix.

Web Hosting customers do not need to take any further action to protect against CVE-2026-109618 and CVE-2026-109619.

To confirm the fix has been applied, see the “How to confirm the fix” update on the CloudLinux blog. You can also run php -v in your cPanel terminal. This shows the build time in UTC, which should convert to yesterday’s date in AEDT.

We are continuing to monitor the servers closely while services fully stabilise.

Posted Oct 23, 2026 - 15:12 AEDT

Resolved

The PHP security update has been completed and the temporary block has been lifted. Website forms and file uploads are working normally again across all our hosting.

Posted Oct 22, 2026 - 14:00 AEDT

Update

This block has been put in place by our server team across our hosting servers, and it is not something we can unblock or change on our end. It is affecting websites on our traditional hosting, including WordPress websites.

Clients whose websites have moved to our new cloud platform are not affected, and everything is working as normal.

We will update this page as soon as the issue is resolved.

Posted Oct 22, 2026 - 09:17 AEDT

Identified

A critical security vulnerability in PHP, the language that runs around 70% of the world's websites, was announced overnight. The Australian Cyber Security Centre has issued a critical alert: https://www.cyber.gov.au/alert/critical-vulnerabilities-in-php

As a precaution, our server team has temporarily blocked form submissions and file uploads on our hosting servers while the security patches are installed. Websites are still online, but contact forms, checkout pages and file uploads may not submit until this is lifted.

We hope to have this resolved today and will update this page as soon as forms are working again. If you need us urgently, call 1300 932 427.

Posted Oct 22, 2026 - 09:14 AEDT

This incident affected: Shared Hosting Service.