Software status
Reported status of PHP-dependent software for CVE-2026-109618 and CVE-2026-109619.
Inventory and assessments by NCSC Netherlands (Nationaal Cyber Security Centrum) and contributors to php2shell.
This independent viewer is not affiliated with or endorsed by NCSC Netherlands.
Loading saved data and checking GitHub…
| Supplier | Product | Version (see Status) | Status CVE-2026-109618 | Status CVE-2026-109619 | Notes | Links |
|---|
No matching software
Try a shorter search or clear the status and supplier filters.
Status definitions and version numbers
The version column refers to the stated status. For "Vulnerable", it identifies known affected versions where available. For "Fix", it identifies the release containing the fix. Check your installed runtime against the linked evidence.
- Vulnerable
- A vendor, upstream source or direct primary research confirms the product is vulnerable in the stated scope.
- Investigation
- The product may be affected and is being assessed.
- Fix
- A vendor or upstream source confirms a fix in the listed version or scope.
- Workaround
- The product is vulnerable, but mitigation steps are available.
- Not vuln
- A vendor or upstream source confirms the product is not vulnerable.