We have detected a vulnerability in PHP, a language used by many websites to function. This vulnerability has been fixed in newer versions. If you are using an affected version, we explain how to check and what to do. If your server is managed by us, we are already applying the patch.
What happened, explained simply
PHP is like a language that websites understand to function. Some websites, like online stores, use PHP to manage data, users, shopping carts, etc.
The vulnerability (CVE-2026-91765) affects websites using an old version of PHP. It's like having a door with a lock that doesn't close properly: someone could take advantage of that to cause problems.
This vulnerability has a high severity (CVSS 7.5), which means it's important to act if you are using an affected version. Although it is not currently being exploited, it's better to be prepared.
Why it's important
If your website uses an affected version, there could be a risk of someone exploiting this vulnerability to cause problems, such as slowing down the website or, in the worst case, preventing it from functioning correctly. It's not about data theft, but it is a failure that could affect your users' experience.
Does it affect me?
The vulnerability affects websites using PHP versions prior to:
- 8.2.34
- 8.3.35
- 8.4.26
- 8.5.11
Also, if you are using an unsupported version (like PHP 5.6, 7.2, 7.4 or 8.0), you won't receive the patch, since these versions no longer receive security updates.
To check the PHP version of your website:
- Log in to your SWPanel dashboard.
- Go to your hosting service section.
- In the Settings section, look for the PHP section.
- There you will see the current PHP version you are using.
What we do in SWPanel
Our team is applying the patch to managed servers. If your server is managed by us, we are already working to protect your website.
What you need to do
- If you are using an unsupported version (like PHP 5.6, 7.2, 7.4 or 8.0), switch to a supported version from the panel:
- Go to your hosting service.
- Go to Settings > PHP.
- Choose a supported version (like 8.2.34 or higher).
- Save the changes.
- If your website is old, before changing, make sure it works well with the new version.
- If your server is not managed by us, update PHP to a fixed version (8.2.34, 8.3.35, 8.4.26 or 8.5.11) or ask the person who manages it.
- If you are using a supported version and your server is managed by us, you don't need to do anything: we are already applying the patch.
Frequently asked questions
Do I have to pay anything?
No, there is no additional cost. If you are using a supported version and your server is managed by us, the patch is applied automatically.
How do I know if I'm already protected?
If you are using a supported version on a server managed by us, our team has already applied the patch. If not, you can check the PHP version in your panel.
What happens if I'm using an unsupported version?
It does not receive the patch. Change it in Settings > PHP and, if your website is old, check that it works with the new version beforehand.
And if your server is not managed by us?
Update PHP to a fixed version (8.2.34, 8.3.35, 8.4.26 or 8.5.11) or ask the person who manages it.
Need help?
If you have any questions or need help changing the PHP version, you can open a support ticket from your SWPanel dashboard. To do so:
- Log in to your panel.
- Go to the Support section.
- Create a new ticket and select the appropriate category.
- Explain your situation and our team will help you.
