PHP Vulnerability Responses by Company

Posit

Global cloud / infrastructure
Aliases / services
Posit / Posit Software / RStudio / Posit Workbench / Posit Connect / Posit Cloud / posit.co
Official website
https://posit.co/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Posit hosted and on-premises products

Response status
No PHP dependency; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Developer of data analysis and statistical computing environments.

The 21 October statement says Posit products do not ship, use or require PHP and are unaffected by both CVEs.

Scope: Independently installed PHP isoutside this statement.

What users should do

No Posit action required; update separate PHP applications.

Official service URL

Source URLs

  1. PHP2Shell product impact assessmenthttps://docs.posit.co/announcements/posts/2026-10-21-php2shell.htmlResponse evidence
Related official sources
  1. PHP2Shell product impact assessmentOfficial notice

Comments