PHP2Shell vulnerability

Incident Report for Cyso

Monitoring

We've completed applying all available security patches and taken mitigating measures for older versions of PHP for which no patch has yet been made available.
Posted Oct 21, 2026 - 23:58 CEST

Update

As new security patches for different versions of PHP are being released, we're applying those they become available. We're still actively working on patching our servers. We will send out new notifications once all possible updates have been applied.
Posted Oct 21, 2026 - 21:06 CEST

Identified

Security patches for the vulnerabilities are being released for different versions of PHP. We're testing and implementing these as they become available.
Posted Oct 21, 2026 - 18:30 CEST

Update

Mitigating measures that disable php_multipart have been implemented at firewall and load balancer level. We are now applying the same measures to our web servers, which affects the upload functionality of your PHP application.
We are continuing to monitor the latest developments. Should the situation change, we will take further action.
Posted Oct 21, 2026 - 15:37 CEST

Update

To ensure communications through our website(s) remain available while we're handling the PHP2Shell vulnerabilities, we're preventatively redirecting all incoming traffic to our cyso.cloud website.
Posted Oct 21, 2026 - 14:35 CEST

Investigating

We are very much aware of the recently disclosed vulnerabilities in PHP known as PHP2Shell. Our technical teams are currently preparing mitigating measures for our customers. We will send out a mail with more information to our customers very shortly.
Posted Oct 21, 2026 - 13:39 CEST