Less Bits, Inc.
- Aliases / services
- ServerPilot / serverpilot.io / Less Bits, Inc.
- Official website
- https://serverpilot.io/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
ServerPilot-managed servers / PHP7.0+
- Response status
- Fixes distributed; verify installation
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Fixed PHP7.0+ packages were automatically distributed to healthy servers. Unhealthy servers may have missed updates.
Scope: PHP5.6 is outside this fully patched scope.
What users should do
Compare dpkg --list 'sp-php*' with the official fixed-package table and install missing updates.
Official service URL
Source URLs
- PHP2Shell response and fixed packageshttps://serverpilot.io/blog/php2shell-vulnerabilities/Response evidence
- https://serverpilot.io/blog/https://serverpilot.io/blog/Service and operation documentation
ServerPilot-managed servers / PHP5.6
- Response status
- Partly mitigated; migration required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
PHP5.6 receives only partial configuration mitigations, not a complete fix.
Scope: Unhealthy servers may not have received updates.
What users should do
Verify package5.6.40-3 and migrate applications to PHP8.2+. Raising post_max_size above32M weakens protection.
Source URLs
- PHP2Shell response and fixed packageshttps://serverpilot.io/blog/php2shell-vulnerabilities/Response evidence
Related official sources
- PHP2Shell response and fixed packagesOfficial noticeOfficial guidance on the current vulnerabilities and response scope.
Comments