Acorn Marketing has addressed the recently identified PHP security vulnerabilities referenced in the PHP security advisory CVE-2026-109618 and CVE-2026-109619 across our hosting environments. The PHP versions currently deployed on our servers have been verified as unaffected.
The majority of websites hosted by Acorn Marketing run PHP 8.3 or 8.4, while some legacy websites continue to use PHP 8.2. The installed versions are as follows:
- PHP 8.4: Version 8.4.27 — Unaffected
- PHP 8.3: Version 8.3.36 — Unaffected
- PHP 8.2: Version 8.2.35 — Unaffected
Our hosting infrastructure is configured to automatically install critical patches and security updates, helping ensure that applicable security fixes are deployed promptly and that vulnerabilities are addressed as part of our ongoing server maintenance practices.
Remediation status: Addressed. No action is required from your IT or security team at this time. Acorn Marketing will continue to monitor and maintain the security of our hosting environment in accordance with our established maintenance procedures.
Please contact us if you require any additional information regarding this update or need documentation for your internal security records.
Regards,
Acorn Marketing
Web Hosting & Technical Support
