From an urgent warning by the prime minister and temporary service shutdowns to internet-exposed risks observed by ZoomEye, the PHP2Shell incident raises questions about Japan's cybersecurity governance.

Executive Summary

In October 2026, Japan's prime minister issued an urgent warning about PHP2Shell, and multiple Japanese organizations temporarily suspended or maintained online services.

According to ZoomEye's PHP2Shell report, Japan accounted for 4,600,612 potentially affected asset records, approximately 4.1% of the global total under the report's methodology, ranking fourth worldwide. As of November 5, 2026, 31,354 of those records had been marked as remediated, representing about 0.68%. This figure describes the share of records carrying a remediation label within the report; it is not an independently verified national vulnerability remediation rate.…