No public statement located for F5 as of 23 October 2026, 01:22 UTC; places checked: https://my.f5.com/manage/s/article/K000163821 (fetch failed: page requires JavaScript, only a CSS error loaded); https://cdn.f5.com/product/bugtracker/ID1270257.html (bug for CVE-2023-0662, no PHP2Shell content); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (F5 BIG-IP TMOS and BIG-IP APM listed Investigation citing K000163821); fetch limit, retry next hour (F5 security advisory listing not yet checked).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
fetch limit, retry next hour (F5 security advisory listing not yet checked)
Last checked
The statement
No public statement located as of at: https://my.f5.com/manage/s/article/K000163821 (fetch failed: page requires JavaScript, only a CSS error loaded); https://cdn.f5.com/product/bugtracker/ID1270257.html (bug for CVE-2023-0662, no PHP2Shell content); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (F5 BIG-IP TMOS and BIG-IP APM listed Investigation citing K000163821); fetch limit, retry next hour (F5 security advisory listing not yet checked).
Notes
The F5 article K000163821 that NCSC-NL cites could not be read in this run (JavaScript-only page), so no statement is confirmed here. Reported by NCSC-NL inventory (status update 23 Oct 2026): K000163821 lists BIG-IP (all modules) 21.x and 17.x under investigation for CVE-2026-109618 and CVE-2026-109619, confirmation of vulnerability not yet available. Unverified until the F5 page is read.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
A badge is issued once a public statement is located and verified on the company's own domain or verified official account.
Questions about F5 and PHP2Shell
Is F5 affected by PHP2Shell?
No public statement located for F5 as of 23 October 2026, 01:22 UTC; places checked: https://my.f5.com/manage/s/article/K000163821 (fetch failed: page requires JavaScript, only a CSS error loaded); https://cdn.f5.com/product/bugtracker/ID1270257.html (bug for CVE-2023-0662, no PHP2Shell content); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (F5 BIG-IP TMOS and BIG-IP APM listed Investigation citing K000163821); fetch limit, retry next hour (F5 security advisory listing not yet checked).
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.