Status in the company's own words: patched. Statement dated 22 October 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Platform.sh now operates as Upsun (platform.sh pages redirect to upsun.com; Upsun press release of September 23, 2025 says Platform.sh evolved into Upsun). At 23:35, the status page confirmed every Upsun Cloud region was updated. (21 October; last patches in place at 04:12 on 22 October) and we patched and restarted affected sites for them. quoted from https://upsun.com/blog/php2shell-upsun-response/ (title: How Upsun handled PHP2Shell: protection in place 22 hours before the patch). Edge WAF rules were blocking attacks in every region from 15:50 on 20 October; customers did not need to act; older unsupported PHP versions were patched the same evening and versions too old to fix are handled by contacting affected customers. No fixed version numbers named. Earlier post: https://upsun.com/blog/php-critical-security-release-oct2026/ (October 21, 2026, not read).
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Platform.sh reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Platform.sh's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Platform.sh and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.