PHP2Shell statement record · Host

CloudLinux and PHP2Shell

Status in the company's own words: patched. Statement dated Oct 22, 2026 - 19:50 UTC (latest update; Investigating Oct 20, 2026 - 21:00 UTC).

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last checked . Last refreshed .

Submit a correction or your statement Get the badge All statements

The record

Company
CloudLinux
Domain
cloudlinux.com
Group
Host
Index category
not an Index vendor
Status
patched
Statement found
yes
Statement
https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5
Statement date
Oct 22, 2026 - 19:50 UTC (latest update; Investigating Oct 20, 2026 - 21:00 UTC)
Fixed version named
yes: upstream PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35; alt-php 5.2 to 8.5 and ea-php52 to ea-php85 with backported fixes (version numbers unchanged); native PHP packages per CloudLinux release
Worker restart stated
yes
End of life plan stated
yes
Source type
status page
Places checked
Last checked

The statement

are now in the stable channel for every affected version

Read the statement on cloudlinux.statuspage.io, dated Oct 22, 2026 - 19:50 UTC (latest update; Investigating Oct 20, 2026 - 21:00 UTC). Source type: status page.

Notes

are now in the stable channel for every affected version (native PHP packages, Oct 22, 2026 - 19:50 UTC), Fixed alt-php packages for CVE-2026-109618 and CVE-2026-109619 are available in the CloudLinux OS repositories (Oct 22, 2026 - 01:19 UTC) and These packages contain the fix for both CVEs, even though the PHP version number is lower. quoted from https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5 (title: Critical PHP vulnerabilities CVE-2026-109618 / CVE-2026-109619 - release 21 October 2026, 14:00 UTC; CloudLinux's status page). Vendor release: hosters must update ea-php, alt-php or native PHP packages and restart Apache, PHP-FPM or LiteSpeed; Imunify360 rulesets 8.83 to 8.85 are an interim mitigation; PHP 8.1 and older get no PHP-project release, minimal backports exist for 7.4, 8.0, 8.1; PHP 8.2 EOL 31 December 2026. Security advisory metadata (OVAL/UpdateInfo) not yet published at 00:52 UTC.

Change log

What the five engines said

AI answers not yet measured

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for CloudLinux reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

CloudLinux's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about CloudLinux and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.

About this page

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last refreshed .

PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy