Resolved on October 21, 2026.
A critical PHP security vulnerability, known as PHP2Shell, was published on 21.10.2026. For further information, please refer to the PHP security advisory. The recommended PHP configuration changes were applied as soon as the advisory was published. After fixed PHP packages became available, they were tested and rolled out to production. There are no indications that systems were affected. No action is required from customers.
Update timeline
- resolved Oct 22, 2026, 08:52 AM UTC
A critical PHP security vulnerability, known as PHP2Shell, was published on 21.10.2026. For further information, please refer to the PHP security advisory. The recommended PHP configuration changes were applied as soon as the advisory was published. After fixed PHP packages became available, they were tested and rolled out to production. There are no indications that systems were affected. No action is required from customers.
Your product runs on more than Prescreen
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services