PHP Vulnerability Responses by Company

Endor Labs Inc.

Global cloud / infrastructure
Aliases / services
Endor Labs / Endor Labs Inc. / endorlabs.com
Official website
https://www.endorlabs.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Container Scanning and Base Image Remediation

Response status
Detection and update comparison guidance
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Software and container security.

Endor Labs describes finding affected PHP in images and comparing base-image upgrades. Reachability analysis does not establish whether exploitation is possible.

Scope: Customer-container assessment and remediation assistance; not a claim that Endor Labs or all customer environments are patched.

What users should do

Update to images containing fixes, then rebuild, redeploy and rescan.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.endorlabs.com/learn/php2shell-critical-vulnerabilities-in-php-cve-2026-109618-cve-2026-109619Response evidence
  2. https://www.endorlabs.com/legal/terms-of-usehttps://www.endorlabs.com/legal/terms-of-useService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments