Box

Box service

Response status

PHP patches applied

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Cloud content management and file sharing service.

Box applied the released patches and continues protective controls, monitoring and validation; no service or customer-content impact was identified.

Scope: The CISO statement covers the global Box service; the Japanese article describes the same response.

What users should do

No customer action is required for Box; contact support for problems.

Official service URL

• https://www.box.com/

Source URLs

1. Box response to PHP2Shellhttps://community.box.com/support-forum-47/box-s-response-to-the-php2shell-vulnerabilities-36200Response evidence
2. https://japan.box.com/blog/box-s-response-to-the-php2shell-vulnerabilitieshttps://japan.box.com/blog/box-s-response-to-the-php2shell-vulnerabilitiesResponse evidence