CVE-2026-119618 status

Another day living in the AI world, and another, critical, zero-day vulnerability disclosed. Is it time to become a full-time farmer?

Here is the vulnerability:

https://nvd.nist.gov/vuln/detail/cve-2026-119618

Here’s the status on our network:

We’ve already rolled out patches across CentOS 7 and our AlmaLinux 9 OSs so we are fully secured across all Gen7 SmartVPSs. Our Gen6 SmartVPSs are too old to be affected, so no patches needed there. ;)

Reminder: If your Brownrice hosting account is on a SmartVPS we’ve already got this covered. If you are hosted on a Root VPS (i.e. Not a SmartVPS) then you’ll need to patch this yourself.

Also, while we were in there we patched an older PHP vulnerability: https://nvd.nist.gov/vuln/detail/cve-2025-1735

About Oban

Oban manages the Brownrice Internet staff, keeps the network humming, and chases his wife and twin boys around during his time off.