PHP Vulnerability Responses by Company

University of Washington

Global cloud / infrastructure
Aliases / services
University of Washington / ワシントン大学 / UW-IT / UW-IT Unix Managed Servers / washington.edu / uw.edu
Official website
https://www.washington.edu
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

UW-IT Unix Managed Servers

Response status
Patched
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Campus web and managed Unix services at the University of Washington.

The October 23 update confirms patches on all UW-IT managed Unix servers.

Scope: Self-managed systems are separate; backported fixes may leave displayed PHP versions unchanged.

What users should do

Managed-service users are told no further action is needed.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://it.uw.edu/help/servicestatus/php-cves/Response evidence
  2. Operating entityhttps://www.washington.edu/cfr/staff/process-guidance/uw-legal-financial-and-tax-information/Service and operation documentation

University of Washington self-managed PHP systems

Response status
Isolation and remediation of unpatched systems
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The university says remaining vulnerable systems will be blocked until patching is verified.

Scope: Managed Unix completion does not establish completion for all self-managed systems.

What users should do

After patching, reply to the notification ticket with IP, hostname and PHP version.

Source URLs

  1. PHP2Shell response and scopehttps://it.uw.edu/help/servicestatus/php-cves/Response evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments