GCIT
- Aliases / services
- GCIT / gcit.com.au
- Official website
- https://gcit.com.au/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Managed customer servers / Azure systems
- Response status
- Reviewed; PHP removed or disabled
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
October22 14:08 AEST: no PHP on managed customer servers; PHP on other managed systems removed or disabled.
Scope: Does not clear all externally hosted customer websites.
What users should do
Follow individual instructions and confirm conditions before restoring PHP services.
Official service URL
Source URLs
- PHP2Shell customer environment review and responsehttps://gcit.com.au/trust-centre/security-advisories/php2shell-critical-php-flaws/Response evidence
Externally hosted customer website assistance
- Response status
- Customers contacted; host confirmation required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
GCIT contacted customers with visible outdated PHP; hidden versions prevent complete external clearance.
Scope: Managed-server nonuse and GCIT's own patched website do not establish external-site completion.
What users should do
Ask your host for the patch date and GCIT for assessment help if needed.
Source URLs
- PHP2Shell customer environment review and responsehttps://gcit.com.au/trust-centre/security-advisories/php2shell-critical-php-flaws/Response evidence
Related official sources
- PHP2Shell customer environment review and responseOfficial noticeOfficial guidance on the current vulnerabilities and response scope.
Comments