PHP2Shell statement record · Platform
No public statement located as of 23 October 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
No public statement located as of at: https://roundcube.net/news/ (newest: Security updates 1.6.20 and 1.7.5 released 19 October 2026, pre-dating PHP2Shell, nothing on PHP2Shell); https://github.com/roundcube/roundcubemail/releases (snapshot newest 1.7.4, 6 Sep, nothing on PHP2Shell); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (Roundcube Webmail listed Vulnerable; Roundcube Docker image family listed Vulnerable, unrebuilt variants).
No Roundcube statement on PHP2Shell found in the project news or release notes as of the last check. NCSC-NL inventory lists Roundcube Webmail and its Docker image family as Vulnerable on the basis of PHP requirements and unrebuilt images, not a project statement.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
A badge is issued once a public statement is located and verified on the company's own domain or verified official account.
Roundcube's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Roundcube and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy