PHP2Shell statement record · Host

Google Cloud and PHP2Shell

Status in the company's own words: patched partly. Statement dated October 21, 2026 (bulletin GCP-2026-070 published 2026-10-21).

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last checked . Last refreshed .

Submit a correction or your statement Get the badge All statements

The record

Company
Google Cloud
Domain
cloud.google.com
Group
Host
Index category
not an Index vendor
Status
patched partly
Statement found
yes
Statement
https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619
Statement date
October 21, 2026 (bulletin GCP-2026-070 published 2026-10-21)
Fixed version named
yes: PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35
Worker restart stated
no
End of life plan stated
yes
Source type
official page
Places checked
Last checked

The statement

Read the statement on cloud.google.com, dated October 21, 2026 (bulletin GCP-2026-070 published 2026-10-21). Source type: official page.

Notes

App Engine standard (PHP 8.2+): Applications are updated automatically. No action is required. App Engine flexible: Applications are not updated automatically. Redeploy your application as soon as possible to PHP 8.2 and newer. Container images you build yourself are your responsibility. The upstream PHP project is not backporting these fixes to PHP 8.1 or earlier. quoted from the blog post (authors Chris Betz, Raluca Ada Popa). Cloud Run / Cloud Run functions updated only where automatic base image updates are enabled; GKE pods must be redeployed. Bulletin GCP-2026-070 at https://docs.cloud.google.com/support/bulletins: Google Cloud itself is not vulnerable. and Some workloads may be automatically patched and updated to the latest PHP.

Change log

What the five engines said

AI answers not yet measured

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for Google Cloud reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Google Cloud's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Google Cloud and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.

About this page

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last refreshed .

PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy