PHP2Shell statement record · Host
Status in the company's own words: mitigation only. Statement dated October 21, 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on www.fastly.com, dated . Source type: official page.Fastly customers may enable the signal covering both CVE-2026-109618 & CVE-2026-109619.
Fastly customers may enable the signal covering both CVE-2026-109618 & CVE-2026-109619.
(Next-Gen WAF virtual patch, opt-in) and Apply the patches quickly, and be aware that the patches reflect only the bugs found and exploited to date.
quoted from https://www.fastly.com/blog/fastlys-proactive-protection-critical-php-rce-cve-2026-109618 (author Kelly Shortridge, Chief Product Officer). the patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
; Versions under 7.4 will not receive a patch from PHP.
The post does not say whether Fastly's own services run PHP. Second post of October 21, 2026: https://www.fastly.com/blog/critical-rce-vulnerabilities-discovered-core-php-cve-2026-109618-cve-2026-109619 (not read in full).
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Fastly reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Fastly's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Fastly and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy