Graylog
- Aliases / services
- Graylog / Graylog, Inc. / Graylog Illuminate / Graylog Security / graylog.org
- Official website
- https://graylog.org
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Graylog application stack and PHP 2Shell detection guidance
- Response status
- No PHP in own stack; detection guidance available
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Log management and security analytics.
Graylog states that its application stack does not use PHP and provides log searches and event-definition guidance for investigating PHP 2Shell.
Scope: Detection requires logging and configuration; this does not certify that customer PHP environments are patched.
What users should do
Ingest relevant web and endpoint logs, adapt searches to extracted fields and streams, and verify fixes for the PHP systems you operate.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://graylog.org/post/detecting-php2shell-cves-with-graylog/Response evidence
- Operating entityhttps://graylog.org/privacy-policy/Service and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments