Rapid7 modules, features, and services status for PHP2Shell
Last updated: October 23, 2026
Rapid7 status
Based on our investigation to date, no customer action is required on the Rapid7 modules, features, and services listed below in response to these vulnerabilities.
We recommend assessing and updating PHP across your own environment, as described in our blog and documentation .
The tables on this page reflect our investigation as of October 23, 2026.
Modules and features status
| Module or feature | Status | Details |
|---|---|---|
| Rapid7 Vulnerability Management Security Console | Not affected | Does not use the affected PHP components |
| Rapid7 Vulnerability Management scan engines and Scan Assistant | Not affected | Does not use the affected PHP components |
| Rapid7 Agent | Not affected | Does not use the affected PHP components |
| Insight Collector | Not affected | Does not use the affected PHP components |
| Rapid7 Application Security on-premises scan engines | Not affected | Does not use the affected PHP components |
| AppSpider | Not affected | Does not use the affected PHP components |
| Rapid7 Automation orchestrator, including plugins | Not affected | Does not use the affected PHP components |
| Velociraptor server and clients | Not affected | Does not use the affected PHP components |
Rapid7 hosted services status
| Service | Status | Details |
|---|---|---|
| Command Platform | No action required | No PHP usage. We continue to actively monitor. |
| Managed Vulnerability Management (MVM) and Managed Threat Complete (MTC) | No action required | No PHP usage. We continue to actively monitor. |
PHP-related files in vulnerability-check content
Some Rapid7 products include PHP-related files as part of their vulnerability-check or testing content, for example scripts used to detect PHP vulnerabilities. These files are not run as a PHP web application and do not expose the affected PHP components.
What to do next
No customer action is required on the Rapid7 components listed above. We recommend assessing and updating PHP across your own environment, as described in our blog and documentation .
Ongoing monitoring
We continue to monitor this situation closely. As with any security matter, we will keep customers informed where appropriate, in line with our established customer notification processes.