PHP Vulnerability Responses by Company

Kualo

Global hosting
Aliases / services
Kualo / kualo.com
Official website
https://www.kualo.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared / reseller hosting

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The provider confirms this incident's fixes are deployed to shared and reseller hosting.

Scope: Managed/dedicated, exceptional legacy configurations and self-managed servers have separate coverage.

What users should do

Check the PHP2Shell fix indicator in the dashboard and contact support about remaining problems.

Official service URL

Source URLs

  1. Kualo: PHP vulnerability responsehttps://status.kualo.com/issues/6ad8e6ad2318dc6837ea08deResponse evidence
  2. https://status.kualo.com/https://status.kualo.com/Service and operation documentation

Managed / dedicated servers with automatic updates

Response status
Patched, with legacy exceptions
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October22 20:47 UTC update confirms patching and removal of restrictions, except a few unpatchable legacy configurations.

Scope: Legacy exceptions and self-managed servers are separate.

What users should do

Verify the server's PHP2Shell status in the dashboard.

Source URLs

  1. Kualo: PHP vulnerability responsehttps://status.kualo.com/issues/6ad8e6ad2318dc6837ea08deResponse evidence

Legacy server configuration exceptions

Response status
Protections maintained; patching incomplete
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

A few configurations cannot be patched as currently configured; protections remain and the provider will contact affected customers.

Scope: Protection remains; patch completion is not confirmed.

What users should do

Check provider messages and coordinate configuration changes or migration with support.

Source URLs

  1. Kualo: PHP vulnerability responsehttps://status.kualo.com/issues/6ad8e6ad2318dc6837ea08deResponse evidence

Self-managed servers

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Self-managed servers are excluded from automatic remediation and its dashboard; customers must update them.

Scope: Managed/shared completion does not cover this scope.

What users should do

Install applicable OS/PHP security packages and verify runtime and application health.

Source URLs

  1. Kualo: PHP vulnerability responsehttps://status.kualo.com/issues/6ad8e6ad2318dc6837ea08deResponse evidence
Related official sources
  1. Kualo: PHP vulnerability responseOfficial notice

Comments