No public statement located for Citrix NetScaler as of 23 October 2026, 01:22 UTC; places checked: https://community.citrix.com/techzone-blogs/110_security-updates/protecting-netscaler-management-access-from-php-cve-2026-109618-cve-2026-109619-r1640/ (fetch failed twice, client error); https://support.citrix.com/securitybulletins (page loads only a JavaScript shell, no content readable); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (NetScaler ADC listed Vulnerable citing this Citrix community security-updates post); fetch limit, retry next hour.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
No public statement located as of at: https://community.citrix.com/techzone-blogs/110_security-updates/protecting-netscaler-management-access-from-php-cve-2026-109618-cve-2026-109619-r1640/ (fetch failed twice, client error); https://support.citrix.com/securitybulletins (page loads only a JavaScript shell, no content readable); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (NetScaler ADC listed Vulnerable citing this Citrix community security-updates post); fetch limit, retry next hour.
Notes
The Citrix community security-updates post that NCSC-NL cites could not be read in this run, so no statement is confirmed here. Reported by NCSC-NL inventory (status update 23 Oct 2026): NetScaler's PHP-based Management Portal (NSIP GUI, management-enabled SNIP GUI, Cluster IP GUI) impacted in all supported software versions, fixed package pending, Console and SVM not impacted. Unverified until the Citrix page is read.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
A badge is issued once a public statement is located and verified on the company's own domain or verified official account.
Questions about Citrix NetScaler and PHP2Shell
Is Citrix NetScaler affected by PHP2Shell?
No public statement located for Citrix NetScaler as of 23 October 2026, 01:22 UTC; places checked: https://community.citrix.com/techzone-blogs/110_security-updates/protecting-netscaler-management-access-from-php-cve-2026-109618-cve-2026-109619-r1640/ (fetch failed twice, client error); https://support.citrix.com/securitybulletins (page loads only a JavaScript shell, no content readable); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (NetScaler ADC listed Vulnerable citing this Citrix community security-updates post); fetch limit, retry next hour.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.