PHP2Shell statement record · Platform
Sophos's PHP2Shell statement is recorded as not affected, with statement date printed as 2026 Oct 21 (Updated 2026 Oct 22, Article Version 4); read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Publish or update your statement. The statement submission is free.
See what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about you: the $490 PHP2Shell Record Check.
We capture the dated answers, trace wrong or missing statements to their sources and deliver a statement page in the format the engines quote.
Agencies: white-label PHP2Shell Record Check, $490 per client report.
Read the statement on www.sophos.com, dated 2026 Oct 21 (Updated 2026 Oct 22, Article Version 4). Source type: official page.
Advisory sophos-sa-20261021-php2shell Advisory: PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)
: No Sophos products are affected by these vulnerabilities.
Mixed: the legacy Sophos-hosted MyUTM licensing portal for end-of-life SG UTM ran an affected PHP version; Sophos took the portal offline on October 21, 2026 and is updating it before restoring service.
No evidence of exploitation found, log review ongoing. IPS signatures for Sophos Firewall and Endpoint released 22 Oct 2026; Firewall WAF has no specific protection. Guidance for customers' own PHP apps: Restart all PHP workers after any configuration change.
; PHP 8.1 and earlier are end-of-life and remain vulnerable. All quotes from the statement URL.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Sophos reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Sophos's PHP2Shell statement is recorded as not affected, with statement date printed as 2026 Oct 21 (Updated 2026 Oct 22, Article Version 4); source: https://www.sophos.com/en-us/security-advisories/sophos-sa-20261021-php2shell.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy