LoanPro incident

PHP2Shell Security Vulnerabilities

Resolved after 21 hours 2 minutes, on October 21, 2026.

resolved Oct 22, 2026, 04:56 PM UTC

Resolved: PHP2Shell Security Vulnerabilities Our engineering team has applied permanent patches for the PHP2Shell vulnerabilities across all LoanPro environments. The temporary protections we put in place with AWS stayed active throughout and remain in place as an added layer of defense. The LoanPro platform remains fully operational and secure. We'll continue to monitor as part of our normal security operations. No action is required from our customers. Thank you for your patience while we addressed this.

Started
Oct 21, 2026, 07:54 PM UTC
Resolved
Oct 22, 2026, 04:56 PM UTC
Duration
21h 2m
Detected by Pingoru
Oct 21, 2026, 07:54 PM UTC

Update timeline

  1. monitoring Oct 21, 2026, 07:54 PM UTC

    LoanPro is aware of the recently disclosed PHP2Shell security vulnerabilities affecting PHP environments worldwide. Our security and engineering teams are coordinating closely with AWS and have added protections to our platform to safeguard our customers. We're confident in the security of the application at this time. We consider this vulnerability extremely serious and are treating it accordingly. We're actively monitoring the situation and will take further action as needed. No action is required from our customers at this time.

  2. resolved Oct 22, 2026, 04:56 PM UTC

    Resolved: PHP2Shell Security Vulnerabilities Our engineering team has applied permanent patches for the PHP2Shell vulnerabilities across all LoanPro environments. The temporary protections we put in place with AWS stayed active throughout and remain in place as an added layer of defense. The LoanPro platform remains fully operational and secure. We'll continue to monitor as part of our normal security operations. No action is required from our customers. Thank you for your patience while we addressed this.

Your product runs on more than LoanPro

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →