Status in the company's own words: patched. Statement dated Oct 22, 2026 - 19:50 UTC (latest update; Investigating Oct 20, 2026 - 21:00 UTC).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
are now in the stable channel for every affected version (native PHP packages, Oct 22, 2026 - 19:50 UTC), Fixed alt-php packages for CVE-2026-109618 and CVE-2026-109619 are available in the CloudLinux OS repositories (Oct 22, 2026 - 01:19 UTC) and These packages contain the fix for both CVEs, even though the PHP version number is lower. quoted from https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5 (title: Critical PHP vulnerabilities CVE-2026-109618 / CVE-2026-109619 - release 21 October 2026, 14:00 UTC; CloudLinux's status page). Vendor release: hosters must update ea-php, alt-php or native PHP packages and restart Apache, PHP-FPM or LiteSpeed; Imunify360 rulesets 8.83 to 8.85 are an interim mitigation; PHP 8.1 and older get no PHP-project release, minimal backports exist for 7.4, 8.0, 8.1; PHP 8.2 EOL 31 December 2026. Security advisory metadata (OVAL/UpdateInfo) not yet published at 00:52 UTC.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for CloudLinux reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
CloudLinux's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about CloudLinux and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.