Domain of One's Own v2 Migrations and the PHP2Shell Security Vulnerability

In light of the recently disclosed critical PHP vulnerabilities, collectively known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), Reclaim Hosting is taking additional steps to ensure that all Domain of One's Own (DoOO) environments are updated and secure.

As part of this effort, we will be moving all eligible Domain of One's Own schools that have not yet transitioned to DoOO v2 onto the new platform. This includes all schools that do not currently rely on WHMCS for apex domain registrations and renewals.

For schools with specific configurations or dependencies that prevent an immediate migration to DoOO v2, including those relying on WHMCS for domain management, we will be reaching out directly to discuss the next steps and ensure their environments are appropriately secured.

What does this mean for your institution?

If your school is currently running the original version of Domain of One's Own and does not depend on WHMCS for apex domain registrations and renewals, you can expect to be migrated immediately to DoOO v2 as part of this security initiative.

Our team will be coordinating these migrations to minimize disruption while prioritizing the security and stability of your hosting environment.

The recent PHP2Shell vulnerabilities underscore the importance of keeping the underlying software and infrastructure of our hosting environments up to date. Moving remaining eligible institutions to DoOO v2 is an important part of that effort, alongside applying the necessary security patches.

We appreciate your patience and understanding as we work through these upgrades. If your institution requires special consideration, our team will be in touch directly.