What OVHcloud says
Web Hosting status incident '[GLOBAL][Web Hosting] - All clusters maintenance notification' (opened 21 Oct 2026): WAF rules and a mitigating workaround pushed to all clusters, deployment of PHP's patched releases underway on all clusters (window to 22 Oct 11:18 UTC), customers may see slowness. No customer action listed. A community-forum post (staff-like account, not confirmed) says versions 7.4.33, 8.0.30, 8.1.34, 8.2.35, 8.3.36, 8.4.27, 8.5.12 are being deployed.
we will deploy this patch releases as soon as possibleall >=7.4 releasesen cours de déploiement des versions fournies par PHPWhat you need to do
None required per status page. Check 'Global PHP version' in the Control Panel after rollout; customers on PHP 5.4-7.3 (no fix) should upgrade to a supported 8.x version.
Check which PHP your site runs
Control Panel > Web Cloud > Hosting plans > pick plan > General information tab > Global PHP version
In WordPress, Tools › Site Health › Info › Server shows the PHP version. Paste it into the version check to see whether it is fixed.
Switch to a supported version
Control Panel > Hosting plans > pick plan > Configuration box > Global PHP version > ... > Modify configuration > Modify the current configuration > Next > Confirm (or edit app.engine.version in .ovhconfig)
Versions offered: 5.4, 5.5, 5.6, 7.0, 7.1, 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3, 8.4, 8.5.
If you can, choose PHP 8.4. It is fixed, supported until 31 December 2028 and runs almost all current plugins. See which version to choose.
Old PHP versions
We found no paid support for old PHP versions at OVHcloud.
Ask OVHcloud directly
Copy this into a support ticket and fill in the parts in square brackets.
Hello OVHcloud support,
PHP released fixes for CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2) on 21 October 2026: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
My account: [account or contract number]
My site: [domain]
PHP version shown in my control panel: [version]
Please confirm:
1. Whether the PHP that serves my site has been updated to one of the fixed releases, or to a build with the fix backported, and the exact version.
2. Whether the PHP processes for my site have been restarted since the update.
3. If not yet, when you expect to finish.
4. If my version is 8.1 or older, which supported version you recommend I switch to.
Thank you.