DigiCert
- Aliases / services
- DigiCert / CertCentral / DigiCert Inc. / digicert.com
- Official website
- https://www.digicert.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
CertCentral
- Response status
- PHP patches applied and completed
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Certificate issuance and digital trust services.
The 22 October official notice explicitly identifies CertCentral as using PHP and confirms completion of relevant security patches. WAF protection additionally blocks exploitation patterns.
Scope: CertCentral's managed environment only. Independently operated PHP websites/apps require their own updates.
What users should do
No additional customer action is required for this incident. Certificate operations remain available as usual.
Official service URL
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Trust Lifecycle Manager
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Trust Lifecycle Manager among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Document Trust Manager
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Document Trust Manager among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Content Trust Manager
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Content Trust Manager among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Software Trust Manager
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Software Trust Manager among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Device Trust Manager
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Device Trust Manager among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
AI Trust Manager
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists AI Trust Manager among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Quantum Central
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Quantum Central among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Gatekeeper
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
DigiCert's official advisory explicitly lists Gatekeeper among products/services that do not use PHP and are unaffected.
Scope: This named product's unaffected status only; separate from patched CertCentral and services contracted through different legal entities.
What users should do
No additional action is required for this issue. Review and update any independently operated PHP environment separately.
Source URLs
- Product response to PHP2Shellhttps://www.digicert.com/blog/php2shell-vulnerabilities-what-you-need-to-knowResponse evidence
- https://www.digicert.com/blog/category/vulnerabilitieshttps://www.digicert.com/blog/category/vulnerabilitiesService and operation documentation
Related official sources
- Product response to PHP2ShellOfficial notice
Comments