Servebolt's PHP2Shell statement is recorded as patched, with statement date printed as Resolved Oct 22, 00:56 CEST (Monitoring Oct 21, 10:58 CEST); read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
PHP security updates have been deployed for PHP versions 8.2 to 8.5. (Oct 21, 17:30 CEST), The PHP security updates have now been deployed for PHP versions 7.3 to 8.1 as well. (Oct 21, 23:10 CEST) and The temporary mitigations have been removed and the incident is now considered fully resolved. (Oct 22, 00:56 CEST) quoted from https://serveboltstatus.com/ (incident: Major PHP security issue; Servebolt's status site). Fixed versions 8.2.35, 8.3.36, 8.4.27, 8.5.12 named at 16:58 CEST. Blog could not be fetched.
Change log
: first check
: Published statement excerpt reverified; classification unchanged.
: Source-only recheck completed; published classification unchanged.
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Servebolt reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Questions about Servebolt and PHP2Shell
Is Servebolt affected by PHP2Shell?
Servebolt's PHP2Shell statement is recorded as patched, with statement date printed as Resolved Oct 22, 00:56 CEST (Monitoring Oct 21, 10:58 CEST); source: https://serveboltstatus.com/incidents/cbbr0l6tkgh9.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.