PHP Vulnerability Responses by Company

Broadcom

Global cloud / infrastructure
Aliases / services
ブロードコム / VMware / Symantec / Broadcom
Official website
https://www.broadcom.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Broadcom products — divisional PHP2Shell response

Response status
Product-specific impact and fix plans
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides virtualization, enterprise software, and security products.

The October26 ESG advisory lists App Control Server, SEPM and CloudSOC SpanVA as affected; CASMA remains under investigation. Security Analytics has separate fix plans. Old umbrella counts do not represent the latest product status.

Scope: Responses differ by product. Investigation is not confirmed impact; published fixes do not establish customer installation.

What users should do

Check your product's advisory for versions and actual availability. Do not treat planned releases as available; use authenticated support for patch instructions when necessary.

Official service URL

Source URLs

  1. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/39404https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/0/39404Response evidence
  2. https://knowledge.broadcom.com/external/article/460321/php2shell-vulnerabilities-cve2026109618.htmlhttps://knowledge.broadcom.com/external/article/460321/php2shell-vulnerabilities-cve2026109618.htmlService and operation documentation
Related official sources
  1. Broadcom response to PHP2ShellOfficial notice

Comments