Kontern, Lyuksemburg, 22-oktabr, 2026-yil, CyberNewswire
Gcore o'zining WAAP Enterprise rejasini 2026-yil 31-dekabrga qadar har qanday davlat organi yoki davlat idorasiga bepul taqdim etadi.
Bu taklif shu hafta boshida Yevropa bo'ylab davlat veb-saytlarini oflayn rejimga o'tkazishga majbur qilgan php2shell zaifliklari ortidan e'lon qilindi.
Gcore WAAP php2shell hujum yo'lini (CVE-2026-109618 va CVE-2026-109619) barcha mijozlar uchun sukut bo'yicha bloklaydi. Oflayn rejimga o'tkazilgan saytlar xizmat orqasiga joylashtirilishi va tuzatish ishlari davom etayotganda qayta onlayn rejimga keltirilishi mumkin.
CVSS 9.2 ball bilan baholangan ikkita PHP zaifligi ilova kodi ishga tushishidan oldin autentifikatsiyasiz masofaviy kod bajarishga imkon beradi.
Niderlandiya, Finlandiya, Daniya va Fransiyadagi davlat portallari, shuningdek shifoxonalar, maktablar va tijorat saytlari CERT-EU va milliy agentliklar tavsiyasi bilan shu hafta oflayn rejimga o'tkazildi.
Tuzatish mavjud bo'lmaganda oflayn rejimga o'tish to'g'ri qaror edi. Katta tizimlarni tuzatish kunlar talab qiladi. Hujum naqshini bloklaydigan filtr qatlami shu ish davom etayotganda saytning ishlashiga imkon beradi.
Agar yangi variantlar paydo bo'lsa, Gcore qoidani markaziy tarzda yangilaydi va operatorlar tuzatish siklini takrorlashlari shart emas.
Gcore'ning Enterprise rejasi domenlar va veb-saytlar, maxsus qoidalar, IP obro'si, botlarni boshqarish, tahdid razvedkasi, API xavfsizligi va SIEM integratsiyasini qamrab oladi. Davlat sektori tashkilotlari rasmiy davlat domeni bilan bu yerda ariza topshirishlari mumkin.
Gcore barcha PHP operatorlariga 8.5.12, 8.4.27, 8.3.36 yoki 8.2.35 versiyalariga yangilashni; yangilashdan so'ng PHP-FPM va uzoq muddatli ishchilarni qayta ishga tushirishni; va manba kirishini cheklab, trafik serverga faqat himoya qatlami orqali yetib borishini ta'minlashni tavsiya qiladi.
PHP 8.1 va undan eski versiyalar rasmiy tuzatish olmaydi; operatorlar sotuvchi tomonidan taqdim etilgan orqaga moslashtirilgan tuzatishni olishlari yoki yangilashlari kerak.
Gcore haqida
Gcore dunyoni AI bilan bog'laydi, istalgan joyda, istalgan vaqtda. AI, bulut, tarmoq va xavfsizlik yechimlarining yetakchi platforma provayderi sifatida Gcore turli sohalardagi bizneslarga mijozlari uchun tez, xavfsiz va uzluksiz tajribalarni taqdim etishda yordam beradi, ular qayerda bo'lishidan qat'i nazar.
Gcore yechimlari AI o'qitish va joylashtirishni tezlashtiradi, samarali va moslashtiriladigan bulut xizmatlarini taqdim etadi, kontent yetkazib berishni yaxshilaydi va serverlar, veb-ilovalar hamda API'larni himoya qiladi.
Keng, moslashuvchan, global chekka infratuzilmasidan foydalanib, Gcore mahsulotlari biznes ehtiyojlari bilan birga o'sishi mumkin, bu tashkilotlarga AI innovatsiyasini rivojlantirish, texnologiya chegaralarini kengaytirish va o'z salohiyatini ro'yobga chiqarish imkonini beradi, shu bilan birga asosiy tamoyillarni saqlab qoladi: operatsion samaradorlik, izchillik va nazorat.
Butun dunyo bo'ylab minglab bizneslar, jumladan Orange, Wargaming, Xsolla va Avast, Gcore'dan o'zlarining global infratuzilmasi, ilovalari va biznesi uchun asos sifatida foydalanmoqda.
Ko'proq ma'lumot www.gcore.com saytida va bizni LinkedIn, X, YouTube va Facebook'da kuzating.
PR va aloqa rahbari
Daniel Hoelzer
Gcore
daniel.hoelzer@gcore.com
Contern, Luxembourg, October 22nd, 2026, CyberNewswire
Gcore is offering its WAAP Enterprise plan free of charge to any government body or public agency until December 31, 2026.
The offer follows the php2shell vulnerabilities that forced public websites offline across Europe earlier this week.
Gcore WAAP blocks the php2shell attack path (CVE-2026-109618 and CVE-2026-109619) by default for all customers. Sites taken offline can be placed behind the service and brought back online while patching continues.
The two PHP vulnerabilities, rated CVSS 9.2, allow unauthenticated remote code execution before any application code runs.
Government portals in the Netherlands, Finland, Denmark, and France, along with hospitals, schools, and commercial sites, were taken offline this week on the advice of CERT-EU and national agencies.
Going offline was the right call while no fix existed. Patching large estates takes days. A filtering layer that blocks the attack pattern lets a site run while that work is done.
If new variants appear, Gcore updates the rule centrally and operators do not need to repeat the patching cycle.
Gcore’s Enterprise plan covers domains and websites, custom rules, IP reputation, bot management, threat intelligence, API security, and SIEM integration. Public-sector organizations can apply here with an official government domain.
Gcore advises all PHP operators to update to 8.5.12, 8.4.27, 8.3.36, or 8.2.35; restart PHP-FPM and long-running workers after updating; and restrict origin access so traffic reaches the server only through a protection layer.
PHP 8.1 and older receive no official fix; operators should obtain a vendor backport or upgrade.
About Gcore
Gcore connects the world to AI, anywhere, anytime. As a leading-edge platform provider of AI, cloud, network, and security solutions, Gcore helps businesses industry-wide to deliver fast, secure, and seamless experiences for their customers, no matter where they’re located.
Gcore solutions accelerate AI training and deployment, deliver efficient, customizable cloud services, improve content delivery, and protect servers, web applications, and APIs.
Leveraging extensive, flexible, global edge infrastructure, Gcore products can scale with business needs, enabling organizations to drive AI innovation, push the boundaries of technology, and reach their potential while maintaining the fundamentals: operational efficiency, consistency, and control.
Join thousands of businesses worldwide, including Orange, Wargaming, Xsolla, and Avast, using Gcore as the foundation for their global infrastructure, applications, and business.
Learn more at www.gcore.com and follow us on LinkedIn, X, YouTube, and Facebook.
PR & Communications Lead
Daniel Hoelzer
Gcore
daniel.hoelzer@gcore.com