Current system status
Service notices and planned maintenance for OzHosting customers.
Current notice
Critical Plesk PHP Security Vulnerabilities
Plesk has identified two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) with a CVSS score of 9.2, which could allow attackers to execute malicious code remotely on affected servers.
- Affected platforms: Plesk for Linux and Windows.
- Affected components: PHP and Plesk PHP Engine (sw-engine).
- Required action: Apply the latest security updates as soon as possible.
- EOL PHP versions: Fixes are available for PHP 7.4, 8.0, and 8.1 through PHP build updates.
- Plesk updates: Fixes for
sw-engineare available in Plesk Obsidian 18.0.81 Update 4. Updates for version 18.0.80 are still being rolled out.
For assistance with PHP version checks, security patching, or server security, customers can contact Technical Support.
Official advisory: Plesk Security Vulnerability Details and Fixes
Service areas
Cloud Backup
No advisory posted
Control Panel
No advisory posted
Microsoft 365
No advisory posted
Hosted Exchange
No advisory posted
Virtual Private Servers (VPS)
No advisory posted
Website Hosting
No advisory posted
Rushfiles
No advisory posted
Network
No advisory posted
Phone System
No advisory posted
For urgent assistance, contact OzHosting support.