/mainlogo.webp)
What happened
Two vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) were recently disclosed, allowing remote code execution on affected web servers.
Temporary mitigations were applied to our servers ahead of an official fix, and PHP was upgraded to the patched version 8.5.12 on October 22.
The Lunarcat website is no longer affected.
What this means for you
Our server logs were reviewed and no sign of exploitation was found.
Your information has been kept safe.