Service status
Last updated |
Next update in 59 sec.
Following the recent disclosure of critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), we would like to reassure our customers and partners that Shufti has not identified any compromise or impact to its infrastructure related to these vulnerabilities.
Our websites and API endpoints are already secured behind Cloudflare, which has deployed additional WAF protections specifically targeting PHP2Shell exploitation attempts.
However, we are not relying solely on Cloudflare's protections. As part of our defense-in-depth security approach, we have already deployed the latest PHP security patches across a significant portion of our infrastructure, with patching of the remaining systems actively underway.
We continue to closely monitor the situation and prioritize the security and integrity of our infrastructure and customer data.
References:
PHP2Shell Vulnerability – Wiz Research
Cloudflare PHP2Shell WAF Protections
— Shufti Security Team