FreePBX's PHP2Shell statement is recorded as customer must update, with statement date printed as October 23, 2026, 4:53pm (as printed); read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Apply the latest PHP security updates by following the standard system software update procedures outlined in our documentation. Notice posted by penguinpbx (C. Maj), signed Sangoma Open Source Team on the official FreePBX forum. Version 17 users must apply standard PHP security updates. Version 16 and earlier users are asked to migrate to version 17; patched PHP 7.4 is offered for testing, not stated as a completed production rollout.
Change log
: first check
: New official Sangoma Open Source Team notice verified; status is customer must update.
: Source-only recheck completed; published classification unchanged.
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for FreePBX reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.