PHP2Shell statement record · Platform
Status in the company's own words: patched. Statement dated October 21st, 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Read the statement on www.passbolt.com, dated . Source type: official page.
Incident page Critical PHP vulnerabilities (CVSS 9.2)
names CVE-2026-109618 and CVE-2026-109619. Mixed: Passbolt Cloud taken offline at 14:30 CEST as a precaution and restored at 17:25 CEST after patching, no trace of exploitation so far; Docker image, Helm chart, AMI, OVA fixed (DigitalOcean awaiting marketplace review); existing AMI/OVA instances and distribution-package installs must update PHP through the OS package manager. The Passbolt API runs on PHP, so every Passbolt server is concerned.
and Self-hosted administrators must update PHP and restart their PHP services.
quoted from the statement URL. Unsupported PHP versions noted as affected; fixes for distribution packages arrive through distribution security updates.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Passbolt reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Passbolt's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Passbolt and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy