PHP Vulnerability Responses by Company

Cloudinary

Global cloud / infrastructure
Aliases / services
Cloudinary / Cloudinary Ltd. / Cloudinary Inc. / Cloudinary UK Ltd.
Official website
https://cloudinary.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Platform unaffected; update your own PHP
Response information checked
2026-10-27 Rechecked: 2026-10-27

Image and video upload, transformation and delivery platform.

The October 21 notice states that upload, transformation and delivery APIs and Console do not use PHP and are unaffected. Customer environments running the PHP SDK require separate action.

What users should do

If your application uses the Cloudinary PHP SDK, update PHP in your own environment to a patched release.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://status.cloudinary.com/Response evidence
  2. Operating entityhttps://cloudinary.com/touService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments