Autodesk Construction Cloud and PHP2Shell

The statement

Autodesk is aware of the recently identified critical PHP vulnerabilities that, according to the PHP security advisory, can allow unauthenticated remote code execution.

Notes

Autodesk is aware of the recently identified critical PHP vulnerabilities that, according to the PHP security advisory, can allow unauthenticated remote code execution. and Impact: Autodesk is actively investigating any possible impact and deploying fixes. quoted from https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-php-security-vuln. Bulletin titled Important information about critical vulnerabilities in PHP, Original Publish 10/21/2026. Names CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 each); does not use the name PHP2Shell; does not say which Autodesk products or services are affected; company-wide bulletin, not specific to Autodesk Construction Cloud. health.autodesk.com shows no PHP item.

Change log

• 23 October 2026: first check

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for Autodesk Construction Cloud reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Autodesk Construction Cloud's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Autodesk Construction Cloud and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.