PHP Vulnerability Responses by Company

Pixel & Tonic

Global cloud / infrastructure
Aliases / services
Craft CMS / Craft Cloud / Craft Commerce / クラフトCMS / ピクセルアンドトニック / Pixel & Tonic
Official website
https://craftcms.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Craft Cloud

Response status
Most updated; build failures remain exceptions
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides a CMS and dedicated hosting.

The October21 notice reports patched Bref images across Cloud except a few sites with preexisting build problems. No follow-up closing those exceptions was located.

Scope: Applies to Craft Cloud; do not extend completion to self-hosted Craft CMS or all customers.

What users should do

Ask support to confirm PHP remediation for projects with build failures.

Official service URL

Source URLs

  1. Craft Cloud response to php2shellhttps://craftcms.com/blog/craft-cloud-and-php2shellResponse evidence
  2. https://craftcms.com/bloghttps://craftcms.com/blogService and operation documentation
  3. https://status.craftcms.com/https://status.craftcms.com/Service and operation documentation
Related official sources
  1. Craft Cloud response to php2shellOfficial notice

Comments