Autodesk Construction Cloud's PHP2Shell statement is recorded as patching, with statement date printed as 10/21/2026; read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Autodesk is aware of the recently identified critical PHP vulnerabilities that, according to the PHP security advisory, can allow unauthenticated remote code execution.
Autodesk is aware of the recently identified critical PHP vulnerabilities that, according to the PHP security advisory, can allow unauthenticated remote code execution. and Impact: Autodesk is actively investigating any possible impact and deploying fixes. quoted from https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-php-security-vuln. Bulletin titled Important information about critical vulnerabilities in PHP, Original Publish 10/21/2026. Names CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 each); does not use the name PHP2Shell; does not say which Autodesk products or services are affected; company-wide bulletin, not specific to Autodesk Construction Cloud. health.autodesk.com shows no PHP item.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Autodesk Construction Cloud reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Questions about Autodesk Construction Cloud and PHP2Shell
Is Autodesk Construction Cloud affected by PHP2Shell?
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.