On October 20, 2026, details of two critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) became publicly available ahead of their scheduled disclosure.

All PHP versions available on our hosting platform have now been patched against both vulnerabilities.

We have deployed the official security updates for PHP 8.2 and newer (PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35), as well as security patches for older PHP versions, including legacy releases.

All updates have been applied server-wide, and no action is required from customers to address these specific vulnerabilities.

Junk Mail folder

By default, when an email message gets filtered as spam, or when it matches some mail filter, it will be delivered to the Junk Mail folder of the mailbox. All filtered messages will be stored there. Messages in the Junk Mail folder will be deleted after 3, 7, 14, or 30 days. You can change this interval or disable the Junk Mail folder by navigating to the Mail Manager section > Actions button (gear icon) for the mailbox > Filters option.

You can access the Junk Folder with the Webmail program on the server or with an IMAP mail program.

IMPORTANT: If you disable the Junk Folder, filtered messages will be silently deleted, and the sender will not receive any notification about the failed delivery. We advise that you use this option with care. To be sure that you do not miss important messages, we advise that you have the Junk Folder enabled.