Status in the company's own words: patched. Statement dated Posted Oct 22, 2026 - 00:33 CEST (resolved); first update Posted Oct 21, 2026 - 14:34 CEST.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Read the statement on status.mews.com, dated Posted Oct 22, 2026 - 00:33 CEST (resolved); first update Posted Oct 21, 2026 - 14:34 CEST. Source type: status page.
Notes
Incident Critical 0 day PHP vulnerability. Investigating, Posted Oct 21, 2026 - 14:34 CEST: We are aware of reports of a newly disclosed critical (zero-day) vulnerability affecting PHP 5.4+. Resolved, Posted Oct 22, 2026 - 00:33 CEST: In response to the Critical PHP Vulnerability announced today, all potentially impacted instances were patched. quoted from https://status.mews.com/incidents/zk5wtj3dll3d. Intermediate updates (16:02 and 17:14 CEST, Oct 21) say protective measures were added and no evidence of customer data or service impact. Does not name PHP2Shell or the CVE numbers; no fixed version, restart or EOL detail; affected components not named.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Mews reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Mews's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Mews and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.