DigitalOcean, LLC
- Aliases / services
- デジタルオーシャン / Droplets / App Platform / Cloudways / DigitalOcean / DigitalOcean, LLC
- Official website
- https://www.digitalocean.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
App Platform — PHP buildpack
- Response status
- Fix available; application required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
A patched PHP buildpack is available. Existing apps need a forced rebuild and redeployment.
Scope: Applies only to the service and configuration in this entry.
What users should do
Review exact PHP pins in composer.json so patched runtimes can be selected, then force rebuild and deploy. Update PHP separately in custom containers.
Official service URL
Source URLs
- https://docs.digitalocean.com/products/app-platform/https://docs.digitalocean.com/products/app-platform/Response evidence
Functions — PHP runtimes
- Response status
- Fix available; application required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
PHP 8.2–8.5 runtimes are patched; PHP 8.0 has been deprecated.
Scope: Applies only to the service and configuration in this entry.
What users should do
Redeploy functions to pick up the patched runtimes.
Official service URL
Source URLs
- DigitalOcean: Critical PHP RCE vulnerabilitieshttps://www.digitalocean.com/blog/critical-php-rce-vulnerabilities-patch-nowResponse evidence
Cloudways — managed PHP hosting
- Response status
- PHP2Shell patched; follow-up issues monitored
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Patching of all active servers completed October 22; the incident closed October 23. A separate notice tracks subsequent PHP patch issues.
Scope: Covers Cloudways Autonomous and Flexible, not self-managed PHP elsewhere.
What users should do
No routine customer action is required. Follow any individual support guidance and subsequent notices.
Official service URL
Source URLs
- https://status.cloudways.com/incidents/xxjt802wwhpkhttps://status.cloudways.com/incidents/xxjt802wwhpkResponse evidence
- https://status.cloudways.com/incidents/mr45wz1l8x4fhttps://status.cloudways.com/incidents/mr45wz1l8x4fService and operation documentation
SnapShooter
- Response status
- Remediation complete
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
PHP used by the service was fully patched as of publication of the notice.
Scope: Applies only to the service and configuration in this entry.
What users should do
The notice states no customer action is required for this service.
Official service URL
Source URLs
- DigitalOcean: Critical PHP RCE vulnerabilitieshttps://www.digitalocean.com/blog/critical-php-rce-vulnerabilities-patch-nowResponse evidence
Droplets / DOKS / custom containers / deployed Marketplace images
- Response status
- Customer update required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Droplets do not include PHP by default. Customer-installed PHP, DOKS workloads, custom containers and previously deployed Marketplace images require customer updates.
Scope: An unaffected infrastructure platform does not establish that customer PHP workloads are safe.
What users should do
Update PHP; rebuild and redeploy containerized workloads.
Official service URL
Source URLs
- DigitalOcean: Critical PHP RCE vulnerabilitieshttps://www.digitalocean.com/blog/critical-php-rce-vulnerabilities-patch-nowResponse evidence
Related official sources
- DigitalOcean: Critical PHP RCE vulnerabilitiesOfficial notice
Comments