Nexcess

We are aware of a recently reported security issue involving compromised eMudhra Certificate Authority (CA) certificates that may be present in certificate trust stores across some environments. At this time, we have not identified any service interruptions or confirmed customer impact related to this issue. Our Security and Engineering teams are actively evaluating the situation and working to determine and implement the appropriate mitigation across affected environments. Additional information regarding this issue is available from Sansec: https://sansec.io/guides/compromised-certificate-authority We will provide additional updates as more information becomes available and as our remediation efforts progress. If you have any questions or concerns, please don't hesitate to contact us via live chat or by opening a support case.

We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution. Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available. We are continuing to closely monitor the situation and will provide further updates as additional information becomes available. If you need assistance or have any concerns, please contact our Support team.

We are aware of a recently reported security issue involving compromised eMudhra Certificate Authority (CA) certificates that may be present in certificate trust stores across some environments. At this time, we have not identified any service interruptions or confirmed customer impact related to this issue. Our Security and Engineering teams are actively evaluating the situation and working to determine and implement the appropriate mitigation across affected environments. Additional information regarding this issue is available from Sansec: https://sansec.io/guides/compromised-certificate-authority We will provide additional updates as more information becomes available and as our remediation efforts progress. If you have any questions or concerns, please don't hesitate to contact us via live chat or by opening a support case.

We are aware of recent reports regarding two critical vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities may affect web servers running PHP 5.4 and later and could potentially allow remote code execution. Our Security and Engineering teams are actively reviewing our hosting environments to assess potential impact. As a precautionary measure, we are implementing appropriate mitigations and working to deploy the necessary security updates across affected systems as they become available. We are continuing to closely monitor the situation and will provide further updates as additional information becomes available. If you need assistance or have any concerns, please contact our Support team.