PHP Vulnerability Responses by Company

Radware

Global cloud / infrastructure
Aliases / services
Radware / Radware Ltd. / Radware Cloud WAF / Radware Security Update Services / radware.com
Official website
https://www.radware.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Radware Cloud Application Protection

Response status
WAF protection rolled out
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Application and network protection.

Radware reports cloud deployment of signature 8.0.0.638, rule 12330.

Scope: Cloud WAF coverage does not mean PHP has been patched.

What users should do

Check protection settings and update protected PHP.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.radware.com/security/threat-advisories-attack-reports/php2shell/Response evidence
  2. https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/Response evidence
  3. https://www.radware.com/security/threat-advisories-attack-reports/https://www.radware.com/security/threat-advisories-attack-reports/Service and operation documentation

AppWall

Response status
Protection update required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

AppWall protection update 8.0.0.638 / 12330 is available.

Scope: Requires action on the deployed product.

What users should do

Update and verify enforcement; also patch PHP.

Source URLs

  1. https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/Response evidence
  2. PHP2Shell response and scopehttps://www.radware.com/security/threat-advisories-attack-reports/php2shell/Response evidence
  3. https://www.radware.com/security/threat-advisories-attack-reports/https://www.radware.com/security/threat-advisories-attack-reports/Service and operation documentation

Alteon WAF Integrated

Response status
Protection update required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Alteon WAF Integrated protection update 8.0.0.638 / 12330 is available.

Scope: Requires action on the deployed product.

What users should do

Update and verify enforcement; also patch PHP.

Source URLs

  1. https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/Response evidence
  2. PHP2Shell response and scopehttps://www.radware.com/security/threat-advisories-attack-reports/php2shell/Response evidence
  3. https://www.radware.com/security/threat-advisories-attack-reports/https://www.radware.com/security/threat-advisories-attack-reports/Service and operation documentation

DefensePro

Response status
Protection update required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

DefensePro protection update 0009_0851_00 / 22156 is available.

Scope: Requires action on the deployed product.

What users should do

Update and verify enforcement; also patch PHP.

Source URLs

  1. https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/Response evidence
  2. PHP2Shell response and scopehttps://www.radware.com/security/threat-advisories-attack-reports/php2shell/Response evidence
  3. https://www.radware.com/security/threat-advisories-attack-reports/https://www.radware.com/security/threat-advisories-attack-reports/Service and operation documentation

AI Xploit Shield

Response status
Additional rules available
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Three PHP2Shell custom signatures are ready.

Scope: Deployment is not asserted complete.

What users should do

Contact Radware to validate and deploy them.

Source URLs

  1. https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/https://www.radware.com/blog/php2shell-guidance-for-protecting-your-environment/Response evidence
  2. PHP2Shell response and scopehttps://www.radware.com/security/threat-advisories-attack-reports/php2shell/Response evidence
  3. https://www.radware.com/security/threat-advisories-attack-reports/https://www.radware.com/security/threat-advisories-attack-reports/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments