PHP Vulnerability Responses by Company

Sophos

Global cloud / infrastructure
Aliases / services
ソフォス / MyUTM / Sophos UTM / Sophos
Official website
https://www.sophos.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

MyUTM (legacy SG UTM licensing portal)

Response status
Offline for updating, per advisory
Response information checked
2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-27

Provides network and endpoint protection products.

The October 22 advisory says MyUTM used affected PHP and was taken offline October 21 for updating. The live status page could not be retrieved in this check.

Scope: Sophos products being unaffected is separate from MyUTM downtime. Keep the previous verification date.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Contact Sophos Support for licensing help and current availability.

Official service URL

Source URLs

  1. Sophos: PHP2Shell security advisoryhttps://www.sophos.com/en-us/security-advisories/sophos-sa-20261021-php2shellResponse evidence

Sophos Firewall / Endpoint IPS

Response status
IPS detection available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

IPS signatures were released October 22. The advisory says Firewall WAF lacks protection specific to these vulnerabilities.

Scope: Separate from MyUTM maintenance; IPS coverage is not WAF coverage.

What users should do

Check IPS signatures and patch protected PHP runtimes.

Source URLs

  1. Sophos: PHP2Shell security advisoryhttps://www.sophos.com/en-us/security-advisories/sophos-sa-20261021-php2shellResponse evidence
Related official sources
  1. Sophos: PHP2Shell security advisoryOfficial notice

Comments