PHP Vulnerability Responses by Company

Descope, Inc.

Global cloud / infrastructure
Aliases / services
Descope / Descope, Inc.
Official website
https://www.descope.com/
Sources identifying the operating company

The contracting entity is Descope, Inc. in the US/Canada, Descope Technologies Israel (2022) Ltd. in Israel, and Descope Technologies UK (2025) Ltd. elsewhere.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Descope PHP SDK

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

The PHP guide documents Project ID initialization, a Management Key for administrative operations and session token validation.

Scope: These sources establish a customer-side PHP integration. Provider infrastructure impact or remediation for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) remains unverified. SDK availability or minimum PHP requirements are not proof of remediation.

What users should do

Restrict management credentials to necessary operations and verify that session token audiences match the intended Project ID.

Official service URL

Source URLs

  1. Descope: official PHP integration documentationhttps://docs.descope.com/getting-started/phpService and operation documentation
  2. Descope: official operator and legal/company informationhttps://www.descope.com/termsService and operation documentation
Related official sources
  1. Descope: official PHP integration documentationOfficial information directory
  2. Descope: official operator and legal/company informationOfficial information directory

Comments