On 21 October 2026, two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619 , prompted a review of the production infrastructure behind SwiftVecto , a web-based platform offering browser utilities and file-processing tools.

The following morning, I carried out security maintenance on the Ubuntu server hosting the application.

What initially appeared to be a straightforward PHP upgrade turned into a useful reminder about distribution-maintained packages, security backports, backups, and the difference between a successful package installation and a healthy production application.

This article documents the actual maintenance process, including the commands used, the results obtained, and the checks performed before returning the server to normal operation.

For security reasons, application-specific directory paths, database names and service identifiers have been replaced with generic examples.

1.…