# DocuSign: Trust page changed

> DocuSign updated its PHP2Shell vulnerability alert to confirm that core services do not use PHP and are unaffected, and that its investigation found no indicators of compromise. A limited number of internal systems use PHP and are being remediated; the alert also links to PHP’s recommended mitigatio

Canonical: https://rewindex.com/change/p6062
Last updated: 2026-10-23T08:45:02Z

**Summary:** DocuSign updated its PHP2Shell vulnerability alert to confirm that core services do not use PHP and are unaffected, and that its investigation found no indicators of compromise. A limited number of internal systems use PHP and are being remediated; the alert also links to PHP’s recommended mitigation measures. _(machine-written, sol)_
- Kind: Trust / security · Label: Changed (not classified) (rule)
- Changed: 2026-10-23 08:45 UTC · Detected: 2026-10-23 08:45 UTC
- [Source: https://www.docusign.com/trust](https://www.docusign.com/trust)
- [Company: DocuSign](https://rewindex.com/company/docusign.md)
- Versions: before page\_version:5228 → after page\_version:6062
- Change 2 of 5 for this page

## What changed

**1. Changed**

```diff
  …back here for any updates regarding the schedule.
- Alert: PHP2Shell Vulnerability ‹date›
+ [UPDATED] Alert: PHP2Shell Vulnerability ‹date› [UPDATED: ‹date› ] On ‹date› ,
  Docusign became aware of a critical vulnerability affecting…
```

**2. Added**

```diff
  …vulnerability affecting PHP, known as PHP2Shell. Details regarding
+ this vulnerability and PHP’s recommended mitigation measures
  are available in the PHP project’s security advisory:…
```

**3. Added**

```diff
  …PHP project’s security advisory: https://www.php.net/archive/2026.php# ‹date› -5 .
+   We can confirm that our core services do not use PHP and are not affected by this vulnerability. The Docusign security and engineering teams have completed a comprehensive investigation into PHP2Shell and found no indicators of compromise in our environment.  We have identified a limited number of internal Docusign systems that utilize PHP and we are actively remediating them. For developers, we are also updating our external integration documentation with an instruction to use a patched PHP version. We are continuing to monitor for any further changes or updates. The security of our products is a top priority. Docusign will continue to monitor the situation as it evolves. Please visit https://docusign.com/trust/alerts for the latest updates regarding this alert. [ORIGINAL: ‹date› ]
  On ‹date› Docusign became aware of a critical…
```

## History of this page

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-22 08:44 UTC | [Trust page changed](https://rewindex.com/change/p5228.md) | Changed (not classified) |
| 2026-10-23 08:45 UTC | Trust page changed (this change) | Changed (not classified) |
| 2026-10-24 08:45 UTC | [Trust page changed](https://rewindex.com/change/p6879.md) | Changed (not classified) |
| 2026-10-30 08:45 UTC | [Trust page changed](https://rewindex.com/change/p11162.md) | Changed (not classified) |
| 2026-11-04 08:44 UTC | [Trust page changed](https://rewindex.com/change/p14484.md) | Changed (not classified) |

Previous: [change](https://rewindex.com/change/p5228.md) · Next: [change](https://rewindex.com/change/p6879.md) · All DocuSign changes: [timeline](https://rewindex.com/company/docusign/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Trust page changed on DocuSign’s Trust page, changed 2026-10-23 08:45 UTC (change 2 of 5).

- Canonical URL: https://rewindex.com/change/p6062
- Citation: DocuSign, “Trust page changed” (2026-10-23 08:45 UTC). Archived by Rewindex: https://rewindex.com/change/p6062 (CC BY 4.0).
- Markdown link: `[DocuSign: Trust page changed (2026-10-23)](https://rewindex.com/change/p6062)`


---
Canonical: https://rewindex.com/change/p6062 · Markdown: https://rewindex.com/change/p6062.md · JSON: https://rewindex.com/api/v1/changes/p6062 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:54:07.876Z