No public statement located as of 23 October 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
No public statement located as of at: https://statamic.com/blog (newest post 14 Oct 2026, nothing on PHP2Shell); https://statamic.com/releases (404); https://github.com/statamic/cms/releases (newest v6.35.0, 1 Oct 2026, nothing on PHP2Shell); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (Statamic CMS listed Vulnerable citing requirements only).
Notes
No Statamic statement on PHP2Shell found in its newsroom or release notes as of the last check. NCSC-NL inventory lists Statamic CMS as Vulnerable on the basis of PHP requirements, not a vendor statement.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
A badge is issued once a public statement is located and verified on the company's own domain or verified official account.
Statamic's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Statamic and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.