PHP Vulnerability Responses by Company

Contrast Security

Global cloud / infrastructure
Aliases / services
Contrast Security / Contrast Security Inc. / Contrast Assess / Contrast Protect / contrastsecurity.com
Official website
https://www.contrastsecurity.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Contrast SaaS platform

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Provider of application vulnerability assessment and runtime protection.

The support bulletin states that both platform editions do not use PHP.

Scope: Customer PHP agents and their PHP runtime are a separate scope.

What users should do

No PHP remediation for the platform itself is required.

Official service URL

Source URLs

  1. PHP2Shell support bulletinhttps://support.contrastsecurity.com/hc/en-us/articles/54832818270996-Support-Bulletin-PHP2Shell-What-You-Need-to-KnowResponse evidence

Contrast on-premises platform

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The support bulletin states that both platform editions do not use PHP.

Scope: Customer PHP agents and their PHP runtime are a separate scope.

What users should do

No PHP remediation for the platform itself is required.

Source URLs

  1. PHP2Shell support bulletinhttps://support.contrastsecurity.com/hc/en-us/articles/54832818270996-Support-Bulletin-PHP2Shell-What-You-Need-to-KnowResponse evidence

Contrast PHP agent

Response status
Customer PHP update required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The agent cannot directly block these memory flaws in the PHP interpreter.

Scope: Separate from platform non-impact. The 23 October update also discusses the distinct CVE-2026-115560.

What users should do

Update PHP, restart PHP-FPM or the web server, and verify the running build.

Source URLs

  1. PHP2Shell support bulletinhttps://support.contrastsecurity.com/hc/en-us/articles/54832818270996-Support-Bulletin-PHP2Shell-What-You-Need-to-KnowResponse evidence
Related official sources
  1. PHP2Shell support bulletinOfficial notice; link to this PHP incident unconfirmed

Comments