Resolved on October 22, 2026.
PHP2Shell vulnerabilities — patched, no impact All in-scope components of the Phished platform have been patched against the PHP2Shell vulnerabilities. The fix was deployed on the evening of 21 October, the same day PHP released it. As soon as the first reports emerged, we applied additional security measures and worked closely with our WAF provider to inspect potentially suspicious traffic. The measures recommended in PHP’s advisory were implemented within minutes of its publication. Because protection was in place throughout, we did not need to take the platform offline, and there was no service interruption. Our investigation so far has found no indicators of compromise. We continue to monitor our systems closely. No action is required from customers. Questions can be sent to [email protected].
Update timeline
- investigating Oct 22, 2026, 07:22 AM UTC
PHP2Shell vulnerabilities — patched, no impact All in-scope components of the Phished platform have been patched against the PHP2Shell vulnerabilities. The fix was deployed on the evening of 21 October, the same day PHP released it. As soon as the first reports emerged, we applied additional security measures and worked closely with our WAF provider to inspect potentially suspicious traffic. The measures recommended in PHP’s advisory were implemented within minutes of its publication. Because protection was in place throughout, we did not need to take the platform offline, and there was no service interruption. Our investigation so far has found no indicators of compromise. We continue to monitor our systems closely. No action is required from customers. Questions can be sent to [email protected].
Your product runs on more than Phished
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services