Liquid Web status

The security updates for CVE-2026-109618 and CVE-2026-109619 have been rolled out across our hosting fleet. Our teams continue to monitor the environment. If your site uses an end-of-life PHP version (PHP 8.1 or older), we strongly recommend moving it to PHP 8.2 or newer. Some older PHP versions no longer receive security fixes from their vendors. To check which PHP version your site is running, see: https://www.liquidweb.com/help-docs/performance/website-optimization/how-to-use-a-phpinfo-file/ If you have questions about your server, please contact our Support team.

We will be performing a security update across our infrastructure to explicitly distrust the compromised eMudhra intermediate Certificate Authorities (CAs). During this maintenance, our engineering team will update the local trust stores to align with upstream security advisories. No downtime or reboots are required. Core services and applications will remain online throughout the maintenance. Following this update, outgoing secure connections (HTTPS/TLS) to any external service or endpoint relying on the revoked eMudhra intermediate certificates will be rejected automatically. If your integration relies on certificates issued by the affected eMudhra intermediates, ensure your certificates have been reissued under an unaffected, trusted Certificate Authority to prevent connection failures.

Our security and engineering teams are actively responding to an industry-wide Linux kernel security disclosure concerning a Spectre v2 Branch Target Reuse (BTR) variant (CVE-2026-64507 / CVE-2026-64508). We will provide updates as progress is made. If you need assistance or have any concerns, please contact our Support team.