Contern, Luxembourg, October 22nd, 2026, CyberNewswire
In a proactive measure, Gcore, a leading provider of cloud and security solutions, has announced that it will offer its WAAP Enterprise plan to any government body or public agency free of charge until December 31, 2026. This initiative comes in response to a recent wave of cyberattacks exploiting vulnerabilities related to php2shell, which led to numerous public websites across Europe being taken offline.
The vulnerabilities in question have been classified as CVE-2026-109618 and CVE-2026-109619, both of which allow for unauthenticated remote code execution before any application code is executed. With a CVSS (Common Vulnerability Scoring System) score of 9.2, these vulnerabilities pose a significant threat. As a result, government agencies in the Netherlands, Finland, Denmark, and France, as well as critical infrastructures such as hospitals and educational institutions, were advised by CERT-EU and respective national agencies to take their sites offline for security purposes.
Taking websites offline proved to be a necessary precaution while awaiting a fix. According to experts, patching large estates can take several days, during which time sites are vulnerable to further exploitation. Gcore’s WAAP (Web Application and API Protection) service creates a filtering layer that effectively blocks the specific attack patterns associated with these vulnerabilities. This allows affected websites to remain operational, albeit behind the security of the WAAP service, while administrators can continue to patch and secure their infrastructure.
Gcore’s solution is not a temporary fix; if new variants of the attacks emerge, Gcore’s system can be updated centrally. This ensures that website operators do not need to engage in repetitive patching, which can be a resource-intensive process. The benefits of Gcore’s WAAP Enterprise plan extend beyond merely blocking attacks. It covers domains and websites, offers custom rule configurations, monitors IP reputation, provides bot management, and integrates threat intelligence. Additionally, it enhances API security and includes facility for Security Information and Event Management (SIEM).
Public-sector organizations interested in utilizing this enterprise plan can apply directly via Gcore’s official site, utilizing an official government domain for the registration process.
Alongside the announcement of the free WAAP Enterprise plan, Gcore has advised all PHP operators to upgrade to the latest stable versions, specifically PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35. They recommend restarting PHP-FPM and long-running workers after the upgrade to ensure maximum security. Furthermore, it is crucial for operators to restrict origin access, allowing only traffic routed through a robust protection layer to reach the server. For those still using PHP 8.1 or older, Gcore notes that no official fix is available; thus, operators are advised to seek a vendor backport or complete an upgrade to a supported version.
Gcore is a company at the forefront of technology, connecting the world to advanced AI solutions anytime, anywhere. As a comprehensive platform offering AI, cloud, network, and security solutions, Gcore assists businesses across various industries in delivering fast, secure, and seamless experiences for their customers, regardless of geographical location.
Their extensive, flexible global edge infrastructure ensures that Gcore’s products can scale effectively alongside a business’s needs. This capability empowers organizations to push the boundaries of AI innovation while maintaining essential operational efficiencies, consistency, and control over their technological ecosystems.
A multitude of companies worldwide, including notable names like Orange, Wargaming, Xsolla, and Avast, rely on Gcore as they build their global infrastructure and applications. By leveraging Gcore’s solutions, these organizations are positioned to enhance their operational capabilities, secure their digital assets, and drive future innovation.
To explore Gcore’s offerings further, interested parties can visit their official website and follow them on various social media platforms, including LinkedIn, X, YouTube, and Facebook.
In summary, Gcore’s timely response to the php2shell vulnerabilities highlights the importance of a robust security posture in the public sector. By providing a powerful security solution free of charge, Gcore not only assists in mitigating immediate risks but also fortifies the digital infrastructure of government agencies against future threats.