After Critical PHP Vulnerabilities Were Disclosed, BeikeShop Automatically Applied Fixes for All Managed Hosting Customers!
BeikeShop Official Website: beikeshop.com
BeikeShop is a premier open-source e-commerce system built on the Laravel framework. Specifically designed for cross-border trade, it offers a fully customizable, multi-language, and multi-currency solution for businesses looking to scale their independent global storefronts.
Once your online store is live, you spend each day listing products, handling orders, and serving customers. When a security issue affects its runtime environment, whether your technical team responds promptly and applies a fix directly affects your ability to keep the store running.
On October 21, 2026, PHP released an urgent security update. To address these critical vulnerabilities, as soon as we were notified, we found a workable solution and began applying the fixes. We promptly notified customers in our community group and explained how to fix the issue. At the same time, we applied the fixes by default for all managed hosting customers.
This Update Applies to the PHP Runtime Environment
PHP is the underlying runtime environment that BeikeShop depends on. This advisory covers two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each with a CVSS v4.0 score of 9.2. Under the conditions required for exploitation, an attacker could execute code remotely without logging in. PHP security advisory, first vulnerability advisory, second vulnerability advisory.
Important: Addressing these vulnerabilities requires updating your PHP version!
We Implemented a Fix, Notified Customers, and Patched Managed Hosting Environments by Default
We took three steps to address this security issue:
- Identified and implemented a fix. We immediately responded to requests from developers and users for an update and identified a solution for these vulnerabilities.
- Notified customers in our community group. We immediately explained the risks and how customers could apply the fixes and upgrade their environments themselves, helping users who maintain their own servers take prompt action.
- Applied the fixes in the background for all managed hosting customers. Alongside the group notification, we directly remediated these vulnerabilities across all managed hosting environments.
When choosing an ecommerce platform, you can look beyond its features, interface, and extensibility to ask one more question: After your store goes live, who will follow up on important security updates, and who will apply them? Our response to these vulnerabilities is a practical answer to that question.
If You Maintain Your Own Store, Please Arrange an Update Promptly
If you or another service provider maintains your server, ask the person responsible to check the PHP version your website is actually using as soon as possible. PHP announced the following patched releases on October 21: official release announcements.
| PHP Branch | Patched Release for This Update |
|---|---|
| 8.2 | 8.2.35 |
| 8.3 | 8.3.36 |
| 8.4 | 8.4.27 |
| 8.5 | 8.5.12 |
Before upgrading, back up your website files, database, and relevant configuration, and check compatibility with your system and extensions. After upgrading, restart the relevant PHP services and check key workflows, including storefront access, admin login, products, the shopping cart, and checkout. Arrange a security update within your current compatible PHP branch first; do not switch directly to a different major version just to match the table.
If you cannot upgrade immediately, ask your technical team to assess temporary measures based on the official advisory. Temporary configuration changes do not replace a complete fix. You still need to apply the security update as soon as possible. For older PHP versions or environments using distribution-maintained packages, the person responsible should also verify the patch status.
Start by gathering your PHP version, BeikeShop version, and details of who maintains your server. Then contact us to discuss the work and planning needed for this update.
If you are choosing a platform for your online store, consider BeikeShop and our cost-effective managed hosting and maintenance services!
Welcome to contact us! Email: marketing@guangda.work
Click the link to learn about the product: https://beikeshop.com/
All rights reserved. Reprint must indicate the source!