Security Update: "PHP2Shell" Vulnerability Patched
21 October 2026
Chirp has secured its server infrastructure today against the recently disclosed PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619). All client websites, data, and applications hosted on our network remain safe, and no action is required from our clients.
While Chirp maintains automated pipelines to deploy critical security updates, we chose to execute this patch sequence manually today. We accelerated the process to provide immediate peace of mind to website owners concerned by today's news headlines.
The applied patch resolves the remote code execution flaws.
Chirp continues to monitor global threat intelligence to ensure our network remains resilient against emerging threats. If you have any questions, please contact us.