PHP2Shell statement record · Platform
Status in the company's own words: patched. Statement dated Oct 22, 2026 (opened and merged).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on github.com, dated Oct 22, 2026 (opened and merged). Source type: official page.
Merged pull request chore(docker): bump binary image to PHP 8.5.12 forge release
(#14773) on the project's official GitHub repository, by Jmevorach, merged by maintainer bradymiller on 22 Oct 2026: PHP shipped 8.5.12 today with the fixes for the PHP2Shell bugs (CVE-2026-109618 and CVE-2026-109619).
and The current pin (10032026) ships PHP 8.5.11, which is vulnerable.
quoted from the PR URL. Covers the official binary Docker image (Alpine images handled in #14771); no statement for other install types was read, and the project forum was not checked.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for OpenEMR reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
OpenEMR's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about OpenEMR and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy