Acronis

Acronis Cyber Protect

Response status

No PHP; unaffected

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Backup, endpoint protection and MDR.

Acronis states Cyber Protect does not use PHP and requires no customer or partner patching.

Scope: The product, separate from Acronis web properties and MDR response.

What users should do

No Cyber Protect update for this issue is required; assess independently hosted PHP.

Official service URL

• https://www.acronis.com

Source URLs

1. PHP2Shell response and scopehttps://www.acronis.com/en/blog/posts/critical-php2shell-vulnerabilities-what-you-need-to-know/Response evidence
2. https://www.acronis.com/blog/https://www.acronis.com/blog/Service and operation documentation

Two affected Acronis web applications

Response status

Updated and reopened

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Acronis reports taking two applications offline, upgrading them to PHP 8.5 and reopening them the same day.

Scope: Application names and exact builds are unspecified; not all 8.5 builds are safe.

What users should do

Use the covered web services normally.

Source URLs

1. PHP2Shell response and scopehttps://www.acronis.com/en/blog/posts/critical-php2shell-vulnerabilities-what-you-need-to-know/Response evidence
2. https://www.acronis.com/blog/https://www.acronis.com/blog/Service and operation documentation

Acronis community forum

Response status

Vendor updated; reopened

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The external forum vendor applied updates and the forum is back online.

Scope: Acronis's externally provided forum, not every service of its vendor.

What users should do

Use the forum normally.

Source URLs

1. PHP2Shell response and scopehttps://www.acronis.com/en/blog/posts/critical-php2shell-vulnerabilities-what-you-need-to-know/Response evidence
2. https://www.acronis.com/blog/https://www.acronis.com/blog/Service and operation documentation

Acronis MDR

Response status

Detection updated; hunting underway

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Acronis reports updating MDR detection rules and TRU threat hunting across MDR customers.

Scope: Monitoring and hunting, not completed patching of customer servers.

What users should do

Review findings and patch customer-managed PHP.

Source URLs

1. PHP2Shell response and scopehttps://www.acronis.com/en/blog/posts/critical-php2shell-vulnerabilities-what-you-need-to-know/Response evidence
2. https://www.acronis.com/blog/https://www.acronis.com/blog/Service and operation documentation