Graylog
- Aliases / services
- Graylog / Graylog, Inc. / Graylog Illuminate / Graylog Security / graylog.org
- Official website
- https://graylog.org
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Listed services and systems
- Response status
- Application stack unaffected; detection guidance published
- Response information checked
- 2026-10-27 Rechecked: 2026-10-27
Log management and security analytics.
Graylog's application stack uses no PHP. It provides queries and Event Definition examples for HTTP requests, PHP errors and child shells.
What users should do
Ingest web and endpoint logs, adapt queries to extracted fields and Streams, investigate from October 17 onward and patch affected PHP.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://graylog.org/post/detecting-php2shell-cves-with-graylog/Response evidence
- Operating entityhttps://graylog.org/privacy-policy/Service and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments