PHP2Shell statement record · Host
Status in the company's own words: patched partly. Statement dated October 21, 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on azure.github.io, dated . Source type: official page.We have completed the rollout of the updated built-in PHP images with the security fixes.
We have completed the rollout of the updated built-in PHP images with the security fixes.
(Latest and Standard Platform Release Channels) and If you run PHP in a custom container, or bring your own PHP runtime, App Service does not patch it.
quoted from https://azure.github.io/AppService/2026/10/21/php-critical-security-release-app-service-linux.html (Azure App Service team blog; authors Tulika Chaudharie, Byron Tardif; title: Critical PHP Security Release: What It Means for Azure App Service on Linux). Customers on the Extended channel told to move off it; End-of-life (EOL) PHP versions will not receive these security patches.
; WordPress on App Service updated except older Alpine-based images: The older Alpine-based images will not receive these security patches.
A second Microsoft post exists at techcommunity.microsoft.com (Azure Network Security Blog, modified 2026-10-22T10:26:20-07:00, title: Addressing PHP2Shell CVE-2026-109618 and CVE-2026-109619: upgrade guidance and Azure WAF mitigations) whose body did not render in fetch.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Microsoft Azure App Service reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Microsoft Azure App Service's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Microsoft Azure App Service and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy