PHP Vulnerability Responses by Company

BambooHR

Global cloud / infrastructure
Aliases / services
BambooHR / BambooHR LLC / bamboohr.com
Official website
https://www.bamboohr.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

BambooHR app (US, Canada and Ireland)

Response status
Restored after patching and validation
Response information checked
2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Human resources and employee management service.

The official incident records patch application at 15:03 UTC and restoration at 18:01 UTC on 21 October.

Scope: The public incident covers three regional apps and the website. The detailed data-impact assessment could not be reverified publicly.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Resume normal login; request Trust Center access for the detailed assessment.

Official service URL

Source URLs

  1. https://status.bamboohr.com/pages/incident/54f0de009d6f51e7140002b7/6ad897f670d2d304e082ebdbhttps://status.bamboohr.com/pages/incident/54f0de009d6f51e7140002b7/6ad897f670d2d304e082ebdbResponse evidence
  2. https://status.bamboohr.com/https://status.bamboohr.com/Service and operation documentation
  3. PHP2Shell patch deployment noticehttps://trust.bamboohr.com/?itemUid=9fabdf99-e0fd-4592-8898-6bd024317e08&source=clickResponse evidence
  4. https://www.bamboohr.com/legal/terms-of-servicehttps://www.bamboohr.com/legal/terms-of-serviceService and operation documentation
Related official sources
  1. PHP2Shell patch deployment noticeOfficial notice

Comments