PHP Vulnerability Responses by Company

Fortra

Global cloud / infrastructure
Aliases / services
Fortra / Fortra LLC / Emerging Threats / fortra.com
Official website
https://www.fortra.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Fortra VM Network Scanner

Response status
Detection available in 4.99.3
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Security products and threat research.

The October 26 update adds authenticated and unauthenticated detection in Network Scanner 4.99.3: remote ID 184193 and PHP inventory ID 102816.

Scope: Detection coverage, not PHP patch deployment or an impact assessment of every Fortra product.

What users should do

Update the scanner and review findings. Patch PHP separately through the environment's administrator or vendor.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.fortra.com/security/emerging-threats/php-critical-remote-code-execution-cve-2026-109618-and-cve-2026-109619Response evidence
  2. https://www.fortra.com/security/emerging-threatshttps://www.fortra.com/security/emerging-threatsService and operation documentation
  3. https://www.fortra.com/legalhttps://www.fortra.com/legalService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments