GLPI (Teclib)'s PHP2Shell statement is recorded as patched, with statement date printed as 21.10.26; read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Post Critical php2shell PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619): What you need to know for your GLPI server. Mixed: GLPI Network Cloud patched (every GLPI Cloud server is running a patched, secure PHP version. as of 14:00 UTC 21 Oct 2026, no customer action, no exploitation detected); self-hosted users: The core GLPI codebase does not contain these security flaws. and You must update the PHP package installed on your host system or application container. All quoted from the statement URL. Restart Apache, Nginx or PHP-FPM after updating; pull rebuilt official Docker images (main, 12, 11, 10) and recreate containers; legacy PHP versions will not receive vendor patches. No PHP version numbers named.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for GLPI (Teclib) reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.