Netwrix

Global cloud / infrastructure

Aliases / services: Netwrix / Netwrix Corporation / Endpoint Protector / CoSoSys / Stealthbits / Imanami / Usercube / netwrix.com
Official website: https://netwrix.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status: Endpoint Protector SaaS patched; on-premises action required
Response information checked: 2026-10-27 Rechecked: 2026-10-27

Data protection and Endpoint Protector.

ADV-2026-021 confirms SaaS remediation. On-premises Endpoint Protector Server through 2608 with PHP below 8.2.35 is affected; other Netwrix products and services are unaffected.

Scope: October26 officialcommunity updates describe refreshed patched2608 images and a backendhotfix for2511–2604. Migrationto2608 remains recommended;5.9.4.2 is end-of-life.

What users should do

Back up the system and VM, then apply security updates through the web interface. Migrate older appliances to 2608 before updating.

Official service URL

https://netwrix.com

Source URLs

PHP2Shell response and scopehttps://community.netwrix.com/t/adv-2026-021-php-runtime-vulnerabilities-in-netwrix-endpoint-protector/161687Response evidence
Backup and web-interface update instructionshttps://community.netwrix.com/t/netwrix-endpoint-protector-and-the-php-php2shell/161601Response evidence
Operating entityhttps://community.netwrix.com/tosService and operation documentation

Related official sources

PHP2Shell response and scopeOfficial notice
Backup and web-interface update instructionsOfficial notice
Operating entityOfficial information directory