Is PHP Running on Your ColdFusion Server? How to Check, and Remove It

A security vulnerability in PHP, PHP2Shell, was patched on October 21, 2026, but some servers may still be affected. A web server security rule was implemented to block multipart/form-data requests, but this may have unintended consequences on websites that use file uploads. To ensure security, it is recommended to install a new version of PHP (8.5.12, 8.4.27, 8.3.36, or 8.2.35) and to configure PHP to handle uploads correctly.