Contern, Luxembourg, October 22nd, 2026, CyberNewswire
Gcore is offering its WAAP Enterprise plan free of charge to any government body or public agency until December 31, 2026. The offer follows the php2shell vulnerabilities that forced public websites offline across Europe earlier this week.
Gcore WAAP blocks the php2shell attack path (CVE-2026-109618 and CVE-2026-109619) by default for all customers. Sites taken offline can be placed behind the service and brought back online while patching continues. The two PHP vulnerabilities, rated CVSS 9.2, allow unauthenticated remote code execution before any application code runs. Government portals in the Netherlands, Finland, Denmark, and France, along with hospitals, schools, and commercial sites, were taken offline this week on the advice of CERT-EU and national agencies.
Going offline was the right call while no fix existed. Patching large estates takes days. A filtering layer that blocks the attack pattern lets a site run while that work is done. If new variants appear, Gcore updates the rule centrally and operators do not need to repeat the patching cycle.
Gcore’s Enterprise plan covers domains and websites, custom rules, IP reputation, bot management, threat intelligence, API security, and SIEM integration. Public-sector organizations can apply here with an official government domain.
Gcore advises all PHP operators to update to 8.5.12, 8.4.27, 8.3.36, or 8.2.35; restart PHP-FPM and long-running workers after updating; and restrict origin access so traffic reaches the server only through a protection layer. PHP 8.1 and older receive no official fix; operators should obtain a vendor backport or upgrade.
About Gcore
Gcore connects the world to AI, anywhere, anytime. As a leading-edge platform provider of AI, cloud, network, and security solutions, Gcore helps businesses industry-wide to deliver fast, secure, and seamless experiences for their customers, no matter where they’re located.
Gcore solutions accelerate AI training and deployment, deliver efficient, customizable cloud services, improve content delivery, and protect servers, web applications, and APIs. Leveraging extensive, flexible, global edge infrastructure, Gcore products can scale with business needs, enabling organizations to drive AI innovation, push the boundaries of technology, and reach their potential while maintaining the fundamentals: operational efficiency, consistency, and control.
Join thousands of businesses worldwide, including Orange, Wargaming, Xsolla, and Avast, using Gcore as the foundation for their global infrastructure, applications, and business.
Learn more at www.gcore.com and follow us on LinkedIn, X, YouTube, and Facebook.
Contact
PR & Communications Lead
Daniel Hoelzer
Gcore
daniel.hoelzer@gcore.com