PHP Vulnerability Responses by Company

Milestone Systems A/S

Global cloud / infrastructure
Aliases / services
Milestone Systems / Milestone Systems A/S / XProtect / Milestone Evidence Manager / Arcules / BriefCam / Project Hafnia / brighter AI
Official website
https://www.milestonesys.com/
Sources identifying the operating company

Publisher of the assessment and licensor in the official BriefCam EULA. This does not merge separate related companies or disregard contractual regions.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

XProtect

Response status
Reported unaffected by PHP2Shell
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Video-management products supplied by Milestone Systems A/S.

Milestone’s October 22 assessment identifies this product as unaffected.

Scope: Evidence Manager separately requires a PHP update.

What users should do

No PHP action is indicated for this product in this disclosure.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.milestonesys.com/articles/php2-shell-vulnerabilities-oct-2026/Response evidence

Husky

Response status
Reported unaffected by PHP2Shell
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Milestone’s October 22 assessment identifies this product as unaffected.

Scope: Evidence Manager separately requires a PHP update.

What users should do

No PHP action is indicated for this product in this disclosure.

Source URLs

  1. PHP2Shell response and scopehttps://www.milestonesys.com/articles/php2-shell-vulnerabilities-oct-2026/Response evidence

Project Hafnia

Response status
Reported unaffected by PHP2Shell
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Milestone’s October 22 assessment identifies this product as unaffected.

Scope: Evidence Manager separately requires a PHP update.

What users should do

No PHP action is indicated for this product in this disclosure.

Source URLs

  1. PHP2Shell response and scopehttps://www.milestonesys.com/articles/php2-shell-vulnerabilities-oct-2026/Response evidence

BriefCam

Response status
Reported unaffected by PHP2Shell
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Milestone’s October 22 assessment identifies this product as unaffected.

Scope: Evidence Manager separately requires a PHP update. The official EULA names Milestone Systems A/S as licensor.

What users should do

No PHP action is indicated for this product in this disclosure.

Source URLs

  1. PHP2Shell response and scopehttps://www.milestonesys.com/articles/php2-shell-vulnerabilities-oct-2026/Response evidence
  2. https://doc-be.milestonesys.com/bundle/EULA_Sep_2025/raw/resource/enus/EULA_Sep_2025.pdf?save_local=truehttps://doc-be.milestonesys.com/bundle/EULA_Sep_2025/raw/resource/enus/EULA_Sep_2025.pdf?save_local=trueService and operation documentation

XProtect Evidence Manager

Response status
Vulnerable PHP requires an update
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 22 assessment says this extension uses vulnerable PHP and directs users to PHP 8.2.35.

Scope: The XProtect no-impact statement does not cover this extension. Customer completion is not reported.

What users should do

Update the installation to PHP 8.2.35; ask Milestone support for implementation guidance.

Source URLs

  1. PHP2Shell response and scopehttps://www.milestonesys.com/articles/php2-shell-vulnerabilities-oct-2026/Response evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments