Providing some brief updates with regard to the 3x main upstreams of concern with regard to this.

CloudLinux are publicly sharing updates with regard to these vulnerabilities and patches via:
https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5

Media Control Panel was made aware of the issues by Merlot Digital, and has published this:
https://www.mediacp.net/news/critical-security-advisory-php2shell

DirectAdmin have confirmed they will be processing this from midnight - forum musings at:
https://forum.directadmin.com/threads/critical-php-updates.82726

There is somewhat credible information that it may explicitly relate to upload_progress functionality.
Based on that, although not officially verified, we are proceeding with removing it for the time being.

We’ve added a “special vdev” to the DirectAdmin backup server, comprised of 3x SSDs in a mirror.

This boosts performance of small-block and metadata I/O, and brings us a step closer to deployment.