No public statement located for Zabbix as of 23 October 2026, 01:22 UTC; places checked: https://www.zabbix.com/security_advisories (list loads dynamically); https://assets.zabbix.com/files/zabbix_security_advisories.rss (newest ZBV-2026-10-05-1 to -6, 5 Oct 2026, nothing on PHP); https://blog.zabbix.com/ (newest 14 Oct 2026); https://www.zabbix.com/forum/zabbix-announcements (only "Zabbix 8.0.0rc2 version is out now!" visible, nothing on PHP2Shell); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (Zabbix web frontend listed Vulnerable citing frontend requirements only).
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
No public statement located as of at: https://www.zabbix.com/security_advisories (list loads dynamically); https://assets.zabbix.com/files/zabbix_security_advisories.rss (newest ZBV-2026-10-05-1 to -6, 5 Oct 2026, nothing on PHP); https://blog.zabbix.com/ (newest 14 Oct 2026); https://www.zabbix.com/forum/zabbix-announcements (only "Zabbix 8.0.0rc2 version is out now!" visible, nothing on PHP2Shell); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (Zabbix web frontend listed Vulnerable citing frontend requirements only).
Notes
No Zabbix statement on PHP2Shell found in the security advisory feed, blog or announcements forum as of the last check. NCSC-NL inventory lists the Zabbix web frontend as Vulnerable on the basis of PHP requirements, not a vendor statement.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
A badge is issued once a public statement is located and verified on the company's own domain or verified official account.
Questions about Zabbix and PHP2Shell
Is Zabbix affected by PHP2Shell?
No public statement located for Zabbix as of 23 October 2026, 01:22 UTC; places checked: https://www.zabbix.com/security_advisories (list loads dynamically); https://assets.zabbix.com/files/zabbix_security_advisories.rss (newest ZBV-2026-10-05-1 to -6, 5 Oct 2026, nothing on PHP); https://blog.zabbix.com/ (newest 14 Oct 2026); https://www.zabbix.com/forum/zabbix-announcements (only "Zabbix 8.0.0rc2 version is out now!" visible, nothing on PHP2Shell); https://github.com/NCSC-NL/php2shell (software list, status update 23 October 2026 00:48 CEST) (Zabbix web frontend listed Vulnerable citing frontend requirements only).
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.