Docusign
- Aliases / services
- Docusign / Docusign Inc. / DocuSign / Docusign eSignature / docusign.com
- Official website
- https://www.docusign.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Docusign customer-facing products and services
- Response status
- Customer services unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Electronic signature and agreement management provider.
Docusign-operated customer services do not use PHP. A small number of internal PHP systems remain under remediation in the notice.
Scope: This does not confirm completed internal remediation or the safety of customer integrations.
What users should do
No cloud-side user action is specified. Update separately operated PHP integrations.
Official service URL
Source URLs
- PHP2Shell advisory updated October 22https://www.docusign.com/trust/alerts/alert-php2shell-vulnerabilityResponse evidence
- https://www.docusign.com/trust/alertshttps://www.docusign.com/trust/alertsService and operation documentation
Customer-operated PHP integrations with Docusign
- Response status
- Customer PHP update advised
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The alert says external integration documentation is being updated to direct use of patched PHP.
Scope: This covers customer-managed runtimes, separately from unaffected Docusign SaaS.
What users should do
Update the PHP runtime running your integration to a patched package.
Source URLs
- PHP2Shell advisory updated October 22https://www.docusign.com/trust/alerts/alert-php2shell-vulnerabilityResponse evidence
- https://www.docusign.com/trust/alertshttps://www.docusign.com/trust/alertsService and operation documentation
Related official sources
- PHP2Shell advisory updated October 22Official notice
Comments