Alert: PHP2Shell Vulnerability

On October 21st, 2026 Docusign became aware of a critical vulnerability affecting PHP, known as PHP2Shell. Details regarding the vulnerability are available in the PHP project’s security advisory: https://www.php.net/archive/2026.php#2026-10-21-5. An active investigation is underway, and we will share additional details as they become available. Please visit the Docusign Trust Center (https://www.docusign.com/trust) for the latest updates and information.