PHP Vulnerability Responses by Company

ESET

Global cloud / infrastructure
Aliases / services
イーセット / ESET Endpoint Encryption Server / ESET
Official website
https://www.eset.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ESET Endpoint Encryption Server

Response status
Fixed version in development
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides endpoint protection and encryption management products.

ESET is developing a version with PHP fixes for both CVEs.

Scope: Limited to Endpoint Encryption Server; no conclusion for other ESET products.

What users should do

Restrict console access to specified IP addresses and monitor the release notice.

Official service URL

Source URLs

  1. PHP vulnerabilities in ESET Endpoint Encryption Serverhttps://support.eset.com/en/alert9029-eset-endpoint-encryption-server-and-the-recent-php-vulnerabilities-published-cve-2026-109618-and-cve-2026-109619Response evidence
Related official sources
  1. PHP vulnerabilities in ESET Endpoint Encryption ServerOfficial notice

Comments