⚠ Important Security Notice: PHP2Shell Vulnerability. We would like to inform our customers about the PHP2Shell security vulnerability, which may affect systems running certain versions of PHP ... Read the full announcement

Security Notice: PHP2Shell Vulnerability

We would like to inform our customers about the PHP2Shell security vulnerability, which affects the PHP interpreter and may impact systems running certain versions of PHP.

What is the vulnerability about?

PHP2Shell is a security issue related to the PHP technology itself and is not specific to any particular hosting company or individual service. Whether a system is affected depends, among other factors, on the PHP version in use and the configuration of the respective server.

It is therefore a broader technical vulnerability and not necessarily the result of improper handling or an action by the hosting provider.

What are we doing?

Our technical team has already begun taking the necessary steps to assess and address the vulnerability:

  • Shared Web Hosting: We are inspecting our hosting systems and applying the necessary security updates wherever required.
  • Managed Servers: We are working to implement the appropriate fixes and protective measures on servers under our management.

Our goal is to address the issue promptly, in accordance with available security updates and the technical requirements of each system.

What should customers with unmanaged servers do?

Customers using Unmanaged VPS or Dedicated Servers, where responsibility for managing the operating system and server services rests with them, should take the necessary action immediately.

Specifically, we recommend the following:

  • Check the installed PHP version.
  • Install the appropriate patched version or security updates provided by the operating system vendor.
  • Review the relevant configurations and services that use PHP.
  • If there are indications of a possible compromise, investigate the relevant logs and systems.

Please ensure that you are not running a vulnerable version of PHP if it is affected by this issue.

Our Commitment

We are monitoring official updates and security advisories and continuing the necessary work to protect the infrastructure under our management.

For more information about the PHP2Shell vulnerability, please refer to the following links:

https://www.php.net/archive/2026.php (Official source)

https://www.enisa.europa.eu/news/joint-statement-on-critical-php-vulnerabilities

https://cert.europa.eu/publications/security-advisories/2026-018/

If you have any questions regarding your services, please contact our technical support team.

Thank you for your trust.

The Friktoria.com Technical Team