PHP Vulnerability Responses by Company

Mendix

Global cloud / infrastructure
Aliases / services
Mendix / Siemens Industry Software Netherlands B.V. / Mendix Technology B.V. / mendix.com
Official website
https://www.mendix.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Mendix platform unaffected
Response information checked
2026-10-24 Rechecked: 2026-10-27

Low-code development platform.

Mendix says its platform does not use PHP across deployment types. Customer-added PHP extensions, plugins and scripts require separate assessment.

This recheck could not revalidate all listed information against current official sources. The previous verification date is retained. Check official notices or support for current availability and required action.

What users should do

No Mendix platform update is required. Inspect custom PHP integrations and added components, and update their PHP runtime.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://support.mendix.com/hc/en-us/articles/31220717762076-What-are-CVE-2026-109618-CVE-2026-109619-PHP2Shell-and-their-impact-on-MendixResponse evidence
  2. Operating entityhttps://www.mendix.com/legal/terms-of-use/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments