Canyon GBS Completes PHP2Shell Security Updates Across All Products

Canyon GBS has completed the security updates addressing PHP2Shell across all our products: Concourse, Apidapter, Advising App (also sold as Elements Engagement through our partner Thesis America), and Aiding App. All four products are patched and protected against these specific vulnerabilities.

This response reflects the urgency and care Canyon GBS brings to security. Our security, engineering, and development teams moved immediately to address the issue and complete the updates. We are proud of their expertise, coordination, and commitment to protecting our customers.

PHP2Shell refers to two critical security flaws in PHP, a programming language widely used to power web applications. These flaws can allow unauthorized code execution on unpatched servers. The PHP security team publicly announced the upcoming fixes on October 20, 2026, with the PHP Foundation sharing the warning. The updates resolving both issues were released on October 21, 2026.

Our government and education customers depend on Canyon GBS to support essential services. They expect us to operate with excellence, take security seriously, and respond immediately when issues arise. We embrace that responsibility and are committed to earning their trust every day.

A special thank you to the security, engineering, and development team members at Canyon GBS who worked hard to complete these updates. Your dedication helps keep our systems safe and our customers focused on the communities they serve.