PHP Vulnerability Responses by Company

Wiz

Global cloud / infrastructure
Aliases / services
ウィズ / Wiz Research / Wiz Cloud / Wiz
Official website
https://www.wiz.io/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Wiz Cloud (PHP vulnerability detection)

Response status
Detection and advisory available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides cloud security and vulnerability research.

Threat Intel Center guidance with agentless/runtime detection.

Scope: Findings do not apply patches.

What users should do

Review assets and patch PHP.

Official service URL

Source URLs

  1. Wiz Research: PHP2Shell investigationhttps://www.wiz.io/blog/php2shell-php-rceResponse evidence

Wiz Defend / Sensor

Response status
Detection and response available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Exploit detection and optional response policies are documented.

Scope: Defense does not replace patches.

What users should do

Check Sensor/policy requirements and patch PHP.

Source URLs

  1. Wiz Research: PHP2Shell investigationhttps://www.wiz.io/blog/php2shell-php-rceResponse evidence
Related official sources
  1. Wiz Research: PHP2Shell investigationOfficial information directory

Comments