PHP Vulnerability Responses by Company

Cyber Security Cloud

Japan-based services
Aliases / services
サイバーセキュリティクラウド / Cyber Security Cloud / 攻撃遮断くん / WafCharm / CSC Managed Rules
Official website
https://www.cscloud.co.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shadankun

Response status
Mitigation signatures applied
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Emergency signatures were applied to all plans October 21–22.

Scope: WafCharm and CSC Managed Rules have separate conditions.

What users should do

Patch PHP and contact support as needed.

Official service URL

Source URLs

  1. Cyber Security Cloud: PHP attack protectionhttps://www.cscloud.co.jp/news/info/202610229451/Service and operation documentation
  2. https://www.shadan-kun.com/news/20261022-1https://www.shadan-kun.com/news/20261022-1Response evidence

WafCharm

Response status
Cloud-specific conditions
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Mitigation rules for AWS WAF v2/Azure; Google Cloud under review.

Scope: Automatic deployment has exceptions.

What users should do

Check AWS permissions, priorities and disabled updates. Advanced oversized-body rules start in Count; assess before blocking. Patch PHP.

Source URLs

  1. https://www.wafcharm.com/jp/news/20261022-1/https://www.wafcharm.com/jp/news/20261022-1/Response evidence
  2. https://www.wafcharm.com/jp/news/https://www.wafcharm.com/jp/news/Service and operation documentation

CSC Managed Rules for AWS WAF

Response status
Mitigation rules released
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

October 21 virtual-patch-rules cover HighSecurity OWASP and API Gateway/Serverless sets.

Scope: October 26 changes address another CVE.

What users should do

Verify rule deployment and patch PHP.

Source URLs

  1. https://www.wafcharm.com/en/managed-rules/support/https://www.wafcharm.com/en/managed-rules/support/Response evidence
  2. Cyber Security Cloud: PHP attack protectionhttps://www.cscloud.co.jp/news/info/202610229451/Service and operation documentation
Related official sources
  1. Cyber Security Cloud: PHP attack protectionOfficial information directory

Comments