Tencent Cloud

T-Sec — CWP / WAF / Cloud Firewall

Response status

Update guidance and protection available

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides cloud computing infrastructure and T-Sec security services.

The official notice dated October 21 recommends updating PHP. It reports detection support in T-Sec host security and protection in WAF and Cloud Firewall.

Scope: CWP provides detection; WAF and Cloud Firewall provide protection. Customer PHP still requires updating.

What users should do

Update the PHP used by your applications to a fixed release. If using T-Sec, check your subscribed products and protection settings.

Official service URL

• https://www.tencentcloud.com/

Source URLs

1. PHP php2shell Remote Code Execution Risk Noticehttps://cloud.tencent.com/announce/detail/2525Response evidence

EdgeOne

Response status

Mitigation rules available; update PHP

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Managed rules address PHP2Shell; evaluation or observation mode does not block attacks.

Scope: Use Standard/Enterprise automatic protection or explicit manual blocking.

What users should do

Verify blocking for rules 4494969309 and 4401216559, and update PHP.

Source URLs

1. https://cloud.tencent.com/announce/detail/2526https://cloud.tencent.com/announce/detail/2526Response evidence