PHP Vulnerability Responses by Company

Dynatrace

Global cloud / infrastructure
Aliases / services
ダイナトレース / OneAgent / Dynatrace
Official website
https://www.dynatrace.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Dynatrace software / OneAgent

Response status
Dynatrace software not affected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Application and infrastructure monitoring provider supporting PHP.

The21October official alert states Dynatrace software is not impacted by either CVE. Its22October guidance tells customers to investigate and patch their monitored PHP workloads.

Scope: The unaffected statement covers Dynatrace software. Installing OneAgent does not make customer PHP or all monitored applications unaffected.

What users should do

Patch monitored PHP separately, account for distribution backports and verify OneAgent compatibility and monitoring after the update.

Official service URL

Source URLs

  1. https://www.dynatrace.com/news/security-alert/cve-2026-109618-and-cve-2026-109619/https://www.dynatrace.com/news/security-alert/cve-2026-109618-and-cve-2026-109619/Response evidence
  2. https://www.dynatrace.com/news/blog/cve-2026-109618-cve-2026-109619-php2shell-critical-vulnerability-what-it-is-and-what-to-do/https://www.dynatrace.com/news/blog/cve-2026-109618-cve-2026-109619-php2shell-critical-vulnerability-what-it-is-and-what-to-do/Service and operation documentation
  3. OneAgent PHP compatibilityhttps://docs.dynatrace.com/docs/ingest-from/technology-supportService and operation documentation
Related official sources
  1. OneAgent PHP compatibilityOfficial information directory

Comments