Contrast Security
- Aliases / services
- Contrast Security / Contrast Security Inc. / Contrast Assess / Contrast Protect / contrastsecurity.com
- Official website
- https://www.contrastsecurity.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Contrast SaaS platform
- Response status
- No PHP; not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Provider of application vulnerability assessment and runtime protection.
The support bulletin states that both platform editions do not use PHP.
Scope: Customer PHP agents and their PHP runtime are a separate scope.
What users should do
No PHP remediation for the platform itself is required.
Official service URL
Source URLs
- PHP2Shell support bulletinhttps://support.contrastsecurity.com/hc/en-us/articles/54832818270996-Support-Bulletin-PHP2Shell-What-You-Need-to-KnowResponse evidence
Contrast on-premises platform
- Response status
- No PHP; not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The support bulletin states that both platform editions do not use PHP.
Scope: Customer PHP agents and their PHP runtime are a separate scope.
What users should do
No PHP remediation for the platform itself is required.
Source URLs
- PHP2Shell support bulletinhttps://support.contrastsecurity.com/hc/en-us/articles/54832818270996-Support-Bulletin-PHP2Shell-What-You-Need-to-KnowResponse evidence
Contrast PHP agent
- Response status
- Customer PHP update required
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The agent cannot directly block these memory flaws in the PHP interpreter.
Scope: Separate from platform non-impact. The 23 October update also discusses the distinct CVE-2026-115560.
What users should do
Update PHP, restart PHP-FPM or the web server, and verify the running build.
Source URLs
- PHP2Shell support bulletinhttps://support.contrastsecurity.com/hc/en-us/articles/54832818270996-Support-Bulletin-PHP2Shell-What-You-Need-to-KnowResponse evidence
Related official sources
- PHP2Shell support bulletinOfficial notice
Comments