Security update: critical PHP vulnerabilities - UPDATE

The official PHP security updates fixing the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been installed on all servers on our hosting platform.

The protective measures we put in place earlier today remain active, and we’ll continue to monitor all servers closely over the coming days.

No action is needed from you.

Security update: critical PHP vulnerabilities

 On 20 October 2026, details of two critical security vulnerabilities in PHP, the programming language that powers many websites including those we host, were made public. The issues are known as "PHP2Shell" (CVE-2026-109618 and CVE-2026-109619). The PHP project released fixes on the afternoon of 21 October.

What we’ve done

Applied additional protective measures across our hosting platform while patches are rolled out

Begun installing the official security updates on all servers as they become available from our software providers

Increased monitoring of all servers and websites for any signs of attempted exploitation

Do you need to do anything?

No. We manage these updates for all websites on our hosting platform. You don’t need to take any action, and we don’t expect any disruption to your website.

Next update

We’ll update this page once patching is complete across all servers, or sooner if anything changes.

Scheduled Maintenance

The following scheduled maintenance operations are currently planned:

• Sunday 23rd August 2026 - Database Maintenance is scheduled for 2am

Why do we carry out scheduled maintenance?
From time to time we need to carry out maintenance operations on our servers to protect them against security threats and to ensure they remain efficient at dealing with ever increasing volumes of traffic.

Wherever possible we will carry out these operations in ways that require no downtime. If this is not possible, we will aim to schedule the work at a time which minimises any potential disruption. Where possible, we will also notify you in advance of any scheduled maintenance.

However, in some cases it may be necessary to respond to issues more quickly, especially when security threats are concerned. There may also be occasions when scheduled maintenance operations take longer than expected. In both cases we will try to keep you informed of events by posting updates to this status page.

No current issues

All Quiet Storm online services are currently operating normally.

If you are experiencing issues with any QS services, please check the following:-

If your website is not loading:

• Double-check the web address for any typos, including using the wrong top-level domain (e.g. ".co.uk" instead of ".com"), missing out hyphens between words (or vice versa), or using a test address when you are trying to access a site that is now live (or vice versa).
• Try visiting another web page, such as www.bbc.co.uk (if this doesn't load either, it is probably an issue with your internet connection rather than your website - you will need to contact your ISP or whoever is responsible for your IT to investigate this).
• Try clearing your browser's cache. The steps for doing this will differ depending upon the exact browser you are using. You can find some instructions for different browsers here: www.refreshyourcache.com, or alternately you can search Google for "how to clear your browser cache in [name of your browser]".
• Try using a different computer (or mobile/tablet) to access the website, or failing that, a different browser on the same computer/device.

If your emails are not working:

• Try loading a web page, such as www.bbc.co.uk (if this doesn't load either, it is probably an issue with your internet connection rather than your website - you will need to contact your ISP or whoever is responsible for your IT to investigate this).
• Try restarting your computer (or mobile/tablet) to see if the issue still persists.
• You can also try accessing your email via our webmail site:
  login.emailarray.com

Also check the scheduled maintenance list below as some services may be temporarily affected by this.

If you are still unable to resolve the issue after checking the above, please contact us on:
01530 510 810

If you need to find out your IP address:

Simply perform a Google search for the words "ip address" and it will show you your public IP address in a box above the rest of the search results. This should look like a series of four one-to-three-digit numbers separated by dots. E.g. 203.0.113.254.

If you see a longer address, with both letters and numbers, this is your IPv6 address. If this happens, search for "ip address" via this site instead: https://ipv4.google.com/