No public statement located for MediaWiki, Wikimedia as of 23 October 2026, 01:22 UTC; places checked: https://www.mediawiki.org/wiki/News (fetch failed, url_not_found); https://www.mediawiki.org/wiki/MediaWiki (fetch failed); https://www.mediawiki.org/w/index.php?search=PHP2Shell+OR+CVE-2026-109618&title=Special%3ASearch (fetch failed); https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/ (fetch failed); https://techblog.wikimedia.org/ (fetch failed); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (MediaWiki listed Vulnerable citing installation requirements; Wikimedia application-server PHP tier listed Investigation).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
No public statement located as of at: https://www.mediawiki.org/wiki/News (fetch failed, url_not_found); https://www.mediawiki.org/wiki/MediaWiki (fetch failed); https://www.mediawiki.org/w/index.php?search=PHP2Shell+OR+CVE-2026-109618&title=Special%3ASearch (fetch failed); https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/ (fetch failed); https://techblog.wikimedia.org/ (fetch failed); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (MediaWiki listed Vulnerable citing installation requirements; Wikimedia application-server PHP tier listed Investigation).
Notes
No MediaWiki or Wikimedia Foundation statement could be located: every mediawiki.org and wikimedia.org page tried in this run failed to load, so this row is unverified rather than confirmed absent. NCSC-NL inventory lists MediaWiki as Vulnerable on the basis of PHP requirements, not a project statement. Synology's 22 Oct 2026 statement lists its MediaWiki package among affected PHP-dependent packages. 23 October source review: the official on-site PHP2Shell/CVE search returned no results. Other recorded places were not all verified; the row retains its earlier last checked time.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
A badge is issued once a public statement is located and verified on the company's own domain or verified official account.
Questions about MediaWiki, Wikimedia and PHP2Shell
Is MediaWiki, Wikimedia affected by PHP2Shell?
No public statement located for MediaWiki, Wikimedia as of 23 October 2026, 01:22 UTC; places checked: https://www.mediawiki.org/wiki/News (fetch failed, url_not_found); https://www.mediawiki.org/wiki/MediaWiki (fetch failed); https://www.mediawiki.org/w/index.php?search=PHP2Shell+OR+CVE-2026-109618&title=Special%3ASearch (fetch failed); https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/ (fetch failed); https://techblog.wikimedia.org/ (fetch failed); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (MediaWiki listed Vulnerable citing installation requirements; Wikimedia application-server PHP tier listed Investigation).
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.