PHP2Shell statement record · Host

Laravel Forge and PHP2Shell

Status in the company's own words: customer must update. Statement dated Oct 21, 2026; Updated 10/22 - 13:25 UTC.

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last checked . Last refreshed .

Submit a correction or your statement Get the badge All statements

The record

Company
Laravel Forge
Domain
forge.laravel.com
Group
Host
Index category
not an Index vendor
Status
customer must update
Statement found
yes
Statement
https://laravel.com/blog/php-critical-vulnerability-response-updates
Statement date
Oct 21, 2026; Updated 10/22 - 13:25 UTC
Fixed version named
yes: PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35
Worker restart stated
no
End of life plan stated
yes
Source type
official page
Places checked
Last checked

The statement

If you're using PHP 8.2, 8.3, 8.4 or 8.5, go to your server in Forge and click 'Update PHP.' Do this for each server.

Read the statement on laravel.com, dated Oct 21, 2026; Updated 10/22 - 13:25 UTC. Source type: official page.

Notes

If you're using PHP 8.2, 8.3, 8.4 or 8.5, go to your server in Forge and click 'Update PHP.' Do this for each server. If this fails, please update PHP over SSH. If your server runs Ubuntu 20.04 or older, you will not be able to update PHP. quoted from https://laravel.com/blog/php-critical-vulnerability-response-updates. PHP 8.0 and 8.1: no patch is available. (upgrade to 8.2+). Forge is a server management tool; the PHP runtime on customer servers is the customer's to update via the one-click Update PHP button; updates may take longer than usual due to demand.

Change log

What the five engines said

AI answers not yet measured

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for Laravel Forge reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Laravel Forge's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Laravel Forge and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.

About this page

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last refreshed .

PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy