As part of our PHP security upgrades we have upgraded the Roundcube webmail servers at http://mail.34sp.com/ so you might notice a change in the appearance of the of the webmail interface the next time you log in.
The core functionality will remain the same and we will be making further improvements over the coming weeks.
We are aware of a remote code execution exploit in all current PHP versions. Patches are due to be released for versions 8.2 and above at 14:00 UTC, and we will deploy them as soon as they become available. If your site runs a lower version, you may need to upgrade unless they release patches for these versions. Please ensure you take a backup before upgrading PHP on your site. You can read the official notice here - https://news-web.php.net/php.announce/509
We are implementing mitigations in an effort to secure all versions until updates can be applied. This is being implemented across all sites this morning; you may experience a small amount of downtime whilst the PHP services are restarted.
We will update this status once we have more information
22nd October 2026, at 5:46PM
We are continuing to work towards getting all of our customers on patched versions of PHP.
WordPress customers on our legacy platform are still in the process of being migrated. You will be contacted directly when this is in progress for your site.
WordPress customers on our current platform should now all have the patched versions available. Please note our control panel only shows the PHP versions to one decimal point; however, if you see 8.2 or above, then you are on a patched version.
Reseller hosting has been updated, and any sites under 8.3 have been updated to a patched version of 8.3.
Professional hosting has been updated, and any sites under 8.3 have been updated to a patched version of 8.3.
Legacy Pro hosting - we will be working to move your sites to the current professional hosting. In the meantime, we have switched all sites to 7.4 with a backported patch and disabled mod_php.
Sitebuilder - new php-fpm packages for the current Red Hat php-fpm release (8.0) with backported fixes were released, and these have been installed
Business and Universal customers - We are still working on a solution for this as no packages are available. We will update when we have a solution for this platform.