Cato Networks
- Aliases / services
- Cato Networks / Cato Networks Ltd. / Cato SASE / Cato IPS / catonetworks.com
- Official website
- https://www.catonetworks.com
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
PHP2Shell IPS protection in Cato SASE
- Response status
- IPS protections deployed
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Cloud networking and security platform.
Cato has deployed PHP2Shell IPS signatures to its cloud. Matching attacks are blocked when payloads are inspected and the applicable signatures are enabled in blocking mode.
Scope: Mitigation for inspected traffic; Cato's own production-infrastructure assessment is separate.
What users should do
Check inspection paths and blocking settings, protect coverage gaps and update PHP itself.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.catonetworks.com/blog/cato-ctrl-threat-brief-php2shell-protection-at-machine-speed/Response evidence
Cato production infrastructure
- Response status
- No affected exposure identified
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Cato reports its infrastructure assessment found production systems were not exposed to PHP2Shell.
Scope: Cato-operated infrastructure only; customer PHP still requires separate IPS and patch checks.
What users should do
No customer update for these vulnerabilities is required.
Source URLs
- PHP2Shell response and scopehttps://www.catonetworks.com/blog/cato-ctrl-threat-brief-php2shell-protection-at-machine-speed/Response evidence
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments