PHP Vulnerability Responses by Company

NOC.org, Inc.

Global cloud / infrastructure
Aliases / services
NOC.org / NOC.org Inc. / DNSRepo / DNSArchive / noc.social / noc.org / NOC.org, Inc.
Official website
https://noc.org
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PHP2Shell protection in NOC WAF

Response status
WAF virtual patch; PHP update still needed
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

WAF and web infrastructure operations.

NOC describes WAF virtual patching while emphasizing that it does not replace fixing PHP itself. It assists protection and migration of legacy environments that cannot immediately update.

Scope: NOC WAF mitigation; WAF use alone does not establish that PHP is patched.

What users should do

Route all relevant hostnames through the WAF, restrict direct origin access and continue permanent PHP updates or migration.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://noc.org/articles/php2shell-what-to-do-when-you-cant-just-upgradeResponse evidence
  2. Operating entityhttps://noc.org/terms/Service and operation documentation

NOC PHP2Shell check tool and remediation resources

Response status
Checks multiple PHP builds, backports and restarts
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

NOC publishes a tool checking CLI, FPM, CGI, Apache and source-built PHP, distribution backports and processes still running old code. Mitigation alone is not treated as patched.

Scope: NOC checking and support resources; inconclusive or mitigated results do not prove a permanent fix.

What users should do

Administrators should review the environment and tool before use, then update, restart or migrate as indicated. Remove environment details from shared output.

Source URLs

  1. PHP2Shell response and scopehttps://noc.org/articles/php2shell-what-to-do-when-you-cant-just-upgradeResponse evidence
  2. Operating entityhttps://noc.org/terms/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments