PHP2Shell vulnerability: ReadSpeaker statement
At ReadSpeaker, we prioritize the security and privacy of our customers' data and systems. We actively monitor internal systems and infrastructure and security channels to identify and quickly resolve potential security threats.
On the morning of October 21st (CEST), our tech team learned about the PHP2Shell vulnerability through the pre-announcement made by the PHP team (https://www.php.net/index.php#2026-10-20-1). In response, our security and engineering teams immediately conducted a full audit of all potentially affected systems and initiated mitigating protocols to ensure the protection of our systems:
- System Updates: PHP has been updated to the latest available version across all systems awaiting the announced official patch.
- Proactive Isolation: Any systems that could not be updated immediately were taken offline while the development teams completed the necessary update work.
All remediation steps are now complete, and our operational environments are fully secured against this vulnerability. Service operations and customer data remain protected, and we will continue active monitoring to ensure the protection and security of our systems.
The ReadSpeaker Security & Engineering Team