New signups and WebDAV access are temporarily suspended on Lolipop rental server
New signups and WebDAV connections are temporarily unavailable on Lolipop rental server as a preventive security measure.
PHP vulnerability maintenance completed and site display resumed
Lolipop!Security
Maintenance for critical PHP vulnerabilities was completed, restoring site display and administrative tools.
Changes
- The session.upload_progress feature stops working across all PHP versions
- PHP 8.2 through 8.5 now run patched versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12
- Patches also apply to unsupported PHP versions 5.3 through 8.1
- No unauthorized access or data leakage targeting the vulnerabilities has been confirmed
Affected areas
CVE-2026-109618CVE-2026-109619session.upload_progressPHP設定ユーザー専用ページphpMyAdminロリポップ！FTP
This summary is independently created by Release Radar and is not an official announcement from the vendor. Please read the official page for accurate details.
More updates
Responses to Lolipop! inquiries are taking longer than usual
Due to a surge in inquiries, you may experience longer waiting times than usual for responses from the Lolipop! support team.
session.upload_progress is now disabled across all PHP versions
Maintenance for PHP vulnerabilities has finished, and session.upload_progress has been disabled across all versions to ensure security.