ownCloud's PHP2Shell statement is recorded as patched, with statement date printed as October 22, 2026, 10:18am; read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
yes: ownCloud Classic 11.0.1 and 10.16.6 (owncloud/server:11.0.1 and owncloud/server:10.16.6 Docker images with patched PHP runtime); Calendar app v2.1.1 and v2.0.1
Post Critical Update for OwnCloud Classic available - PHP vulnerabilities on ownCloud's own forum central.owncloud.org by user jordana, written in company voice (We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 known as PHP2Shell.); staff label not printed on the page. Mixed: Please update your ownCloud Classic installations immediately to the latest versions. and Customers not running docker version of OwnCloud Classic should update the PHP themselves quoted from the statement URL. ownCloud Infinite Scale (oCIS) stated unaffected. No PHP versions named.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for ownCloud reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.