PHP Vulnerability Responses by Company

Nimble Information Strategies

Global cloud / infrastructure
Aliases / services
Nimble Information Strategies / Nimble / Nimble Information Strategies Inc. / SmartCloud / NimbleSign / Nimble Intelligence / nimble.ca
Official website
https://nimble.ca/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Nimble SmartCloud

Response status
Not affected (no PHP)
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

A Canadian document-management and digital-workflow provider.

The official advisory updated October21 states SmartCloud does not use PHP and is not affected by either CVE.

Scope: This assessment covers SmartCloud. Patching one internal PHP application is a separate internal action and does not cover customer-managed environments.

What users should do

No user action is required for SmartCloud. Review any independently operated PHP environment separately.

Official service URL

Source URLs

  1. Nimble PHP2Shell impact assessmenthttps://nimble.ca/trust/advisories/php2shell-cve-2026-109618-cve-2026-109619Response evidence
  2. https://nimble.ca/trusthttps://nimble.ca/trustService and operation documentation

NimbleSign

Response status
Not affected (no PHP)
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official advisory updated October21 states NimbleSign does not use PHP and is not affected by either CVE.

Scope: This assessment covers NimbleSign. Patching one internal PHP application is a separate internal action and does not cover customer-managed environments.

What users should do

No user action is required for NimbleSign. Review any independently operated PHP environment separately.

Source URLs

  1. Nimble PHP2Shell impact assessmenthttps://nimble.ca/trust/advisories/php2shell-cve-2026-109618-cve-2026-109619Response evidence
  2. https://nimble.ca/trusthttps://nimble.ca/trustService and operation documentation

Nimble Intelligence APIs

Response status
Not affected (no PHP)
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official advisory updated October21 states Nimble Intelligence APIs does not use PHP and is not affected by either CVE.

Scope: This assessment covers Nimble Intelligence APIs. Patching one internal PHP application is a separate internal action and does not cover customer-managed environments.

What users should do

No user action is required for Nimble Intelligence APIs. Review any independently operated PHP environment separately.

Source URLs

  1. Nimble PHP2Shell impact assessmenthttps://nimble.ca/trust/advisories/php2shell-cve-2026-109618-cve-2026-109619Response evidence
  2. https://nimble.ca/trusthttps://nimble.ca/trustService and operation documentation
Related official sources
  1. Nimble PHP2Shell impact assessmentOfficial notice; link to this PHP incident unconfirmed

Comments