PHP2Shell statement record · Host
Google Cloud's PHP2Shell statement is recorded as patched partly, with statement date printed as October 21, 2026 (bulletin GCP-2026-070 published 2026-10-21); read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Publish or update your statement. The statement submission is free.
See what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about you: the $490 PHP2Shell Record Check.
We capture the dated answers, trace wrong or missing statements to their sources and deliver a statement page in the format the engines quote.
Agencies: white-label PHP2Shell Record Check, $490 per client report.
Read the statement on cloud.google.com, dated October 21, 2026 (bulletin GCP-2026-070 published 2026-10-21). Source type: official page.
App Engine standard (PHP 8.2+): Applications are updated automatically. No action is required.
App Engine flexible: Applications are not updated automatically. Redeploy your application as soon as possible to PHP 8.2 and newer.
Container images you build yourself are your responsibility.
The upstream PHP project is not backporting these fixes to PHP 8.1 or earlier.
quoted from the blog post (authors Chris Betz, Raluca Ada Popa). Cloud Run / Cloud Run functions updated only where automatic base image updates are enabled; GKE pods must be redeployed. Bulletin GCP-2026-070 at https://docs.cloud.google.com/support/bulletins: Google Cloud itself is not vulnerable.
and Some workloads may be automatically patched and updated to the latest PHP.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Google Cloud reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Google Cloud's PHP2Shell statement is recorded as patched partly, with statement date printed as October 21, 2026 (bulletin GCP-2026-070 published 2026-10-21); source: https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy