PHP Vulnerability Responses by Company

Catalyst IT

Global hosting
Aliases / services
Catalyst IT / Catalyst IT Limited / Catalyst.NET / catalyst.net.nz
Official website
https://www.catalyst.net.nz/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Internet-facing hosted and managed systems

Response status
Public systems reported patched
Response information checked
2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

New Zealand open-source development and managed services provider.

The existing advisory reports public systems patched by 09:00 on 22 October and no evidence of compromise in hosted or managed environments.

Scope: Covers Catalyst-hosted or managed public environments, not every standalone product.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Confirm contractual scope with the team.

Official service URL

Source URLs

  1. PHP2Shell advisoryhttps://www.catalyst.net.nz/stories-and-studies/catalyst-blog/advisory-php2shell-vulnerabilitiesResponse evidence
Related official sources
  1. PHP2Shell advisoryOfficial notice
  2. Company and contracting entity informationOfficial information directory

Comments