Gainsight

Gainsight Customer Communities

Response status

Patched; uploads restored

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Customer success and community platform provider.

Production PHP fixes were deployed; all community uploads were restored on 26 October. Gainsight reports no evidence of exploitation and continued monitoring.

Scope: Customer Communities only; patch deployment and removal of precautionary upload restrictions are separate milestones.

What users should do

No additional action; contact Gainsight Support for issues.

Official service URL

• https://www.gainsight.com/

Source URLs

1. Customer Communities image upload incidenthttps://status.insided.com/incidents/2d0ygy6fqd62Response evidence
2. https://communities.gainsight.com/%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B-433/php%E3%81%AE%E9%87%8D%E5%A4%A7%E3%81%AA%E8%84%86%E5%BC%B1%E6%80%A7-php2shell-%E3%81%B8%E3%81%AE%E5%AF%BE%E5%BF%9C%E7%8A%B6%E6%B3%81-32013https://communities.gainsight.com/%E3%81%8A%E7%9F%A5%E3%82%89%E3%81%9B-433/php%E3%81%AE%E9%87%8D%E5%A4%A7%E3%81%AA%E8%84%86%E5%BC%B1%E6%80%A7-php2shell-%E3%81%B8%E3%81%AE%E5%AF%BE%E5%BF%9C%E7%8A%B6%E6%B3%81-32013Response evidence

Gainsight CS

Response status

Available patches and mitigations applied; monitoring

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 23 October PHP/Node.js notice reports available patches and mitigations applied, with no evidence of compromise.

Scope: Explicit CS US1, US2 and EU components; not proof every component received a PHP-specific patch.

What users should do

No customer action; contact Gainsight for questions.

Source URLs

1. https://status.gainsight.com/incidents/ybrgt0gr0l02https://status.gainsight.com/incidents/ybrgt0gr0l02Response evidence