NetSPI, LLC
- Aliases / services
- NetSPI / NetSPI LLC / NetSPI EASM / NetSPI PTaaS / netspi.com / NetSPI, LLC
- Official website
- https://www.netspi.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
NetSPI EASM
- Response status
- Version-based detection being prepared
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Attack-surface management and penetration testing.
NetSPI says it is working to release PHP2Shell version-based detection. Customers are advised to find PHP assets on the Applications page meanwhile.
Scope: Preparation is not detection availability or completion of customer remediation.
What users should do
Review PHP assets, verify actual versions and patched packages, and update affected systems.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.netspi.com/blog/executive-blog/critical-vulnerability/php2shell-unauthenticated-rce-on-php-cve-2026-109618-cve-2026-109619/Response evidence
NetSPI PTaaS and penetration testing
- Response status
- Exposure and patch-validation support
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
NetSPI offers penetration-testing support to verify PHP2Shell exposure and validate patching.
Scope: Validation support, not an announcement that customer systems have been patched.
What users should do
Agree the authorized environment and test scope with NetSPI; administrators must verify remediation.
Source URLs
- PHP2Shell response and scopehttps://www.netspi.com/blog/executive-blog/critical-vulnerability/php2shell-unauthenticated-rce-on-php-cve-2026-109618-cve-2026-109619/Response evidence
Related official sources
- PHP2Shell response and scopeOfficial notice
Comments