On 21 October 2026, Upsun had WAF rules blocking PHP2Shell attacks before the official fix existed. Here’s the full timeline of how we protected every customer, including sites on unsupported PHP versions.
How Upsun handled PHP2Shell: protection in place 22 hours before the patch
calendar_today
October 22, 2026
domain
upsun