PHP Vulnerability Responses by Company

runZero, Inc.

Global cloud / infrastructure
Aliases / services
runZero / runZero, Inc. / Rumble / Rumble Inc. / rumble.run / Dragos / runzero.com
Official website
https://www.runzero.com
Sources identifying the operating company

Provider in the current MSA; an acquisition announcement alone does not merge it with the acquirer.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

runZero Software Inventory

Response status
PHP discovery guidance published
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Network asset and software discovery.

The October 21 update provides a Software Inventory query to locate PHP and identify potentially exposed systems.

Scope: Inventory discovery is not proof of vulnerability or completed remediation.

What users should do

Verify the running PHP build and vendor fixes on discovered hosts, then update and restart as required.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.runzero.com/blog/phpResponse evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments