Status in the company's own words: patched. Statement dated 21 Oct 2026 (updates 21 Oct 10:00 and 21 Oct 19:30).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Post Critical PHP security update: what it means for Kimai users. Mixed: All Kimai Cloud systems were updated within minutes after the official PHP releases were published.; self-hosted installs must update PHP themselves and Docker users must pull updated images; Updating Kimai alone won't fix this: PHP itself has to be updated on every server that runs it. Both quoted from the statement URL. Release 2.70.1 (21 Oct) exists mainly to trigger a rebuild of our Docker images, which will the ship fixed PHP versions quoted from https://github.com/kimai/kimai/releases/tag/2.70.1. No CVE IDs named in the post.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Kimai reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Kimai's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Kimai and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.