On October 21, 2026, two critical vulnerabilities in PHP known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) were publicly disclosed. Our infrastructure team began addressing them the morning they were announced. Here’s where things stand for liveedit websites:
Protected by Cloudflare. Liveedit websites are served through Cloudflare, whose web application firewall began automatically blocking PHP2Shell attack attempts on October 21.
Added safeguards on our servers. We applied the recommended server configuration changes as a second layer of defense.
No sign of compromise. We reviewed our web servers for any indication of intrusion and found none.
No action is needed on your part, and all websites continue to run normally. If you have any questions, please reach out to our team.
liveedit posted 2 days ago
On October 21, 2026, two critical vulnerabilities in PHP known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) were publicly disclosed. Our infrastructure team began addressing them the morning they were announced. Here’s where things stand for liveedit websites:
No action is needed on your part, and all websites continue to run normally. If you have any questions, please reach out to our team.