PHP Vulnerability Responses by Company

Patrowl SAS

Global hosting
Aliases / services
Patrowl / Patrowl SAS / patrowl.io / PatrowlHears
Official website
https://patrowl.io/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Patrowl EASM

Response status
External exposure assessment available
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Patrowl's PHP2Shell article describes finding exposed PHP assets, comparing version signals and monitoring exposure. Laboratory reproduction does not mean customer systems were patched.

Scope: EASM discovery and prioritization scope; not a guarantee of testing or patching every customer system.

What users should do

Review exposed assets, install fixed PHP or backports covering both CVEs, and restart relevant processes.

Official service URL

Source URLs

  1. Patrowl: PHP vulnerability responsehttps://patrowl.io/fr/blog/php2shell-failles-rce-php-cve-2026-109618-109619Response evidence
  2. https://patrowl.io/fr/bloghttps://patrowl.io/fr/blogService and operation documentation
  3. https://patrowl.io/fr/mentions-legaleshttps://patrowl.io/fr/mentions-legalesService and operation documentation

Patrowl continuous penetration testing

Response status
Continuous testing and expert validation
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The PHP2Shell article describes daily automated testing and expert validation for exposure assessment. Customers still need to apply PHP fixes.

Scope: Patrowl's continuous testing service, distinct from EASM inventory signals.

What users should do

Review results within authorized contractual scope, then patch and restart PHP.

Source URLs

  1. Patrowl: PHP vulnerability responsehttps://patrowl.io/fr/blog/php2shell-failles-rce-php-cve-2026-109618-109619Response evidence
Related official sources
  1. Patrowl: PHP vulnerability responseOfficial notice
  2. Patrowl: Operating company informationOfficial information directory

Comments