PHP Vulnerability Responses by Company

NSO

Global hosting
Aliases / services
NSO / NSO Netwerk & Systeem Ondersteuning B.V. / nso.eu
Official website
https://www.nso.eu/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

NSO-managed websites and web applications

Response status
Managed PHP systems patched
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 27 update confirms fixes installed on systems NSO manages; customers need no PHP2Shell action for those systems.

Scope: Some dedicated-server webmail remains suspended. Patched PHP does not mean every function is restored.

What users should do

Confirm that your system is managed by NSO; ask support separately about unavailable webmail.

Official service URL

Source URLs

  1. NSO: PHP vulnerability responsehttps://www.nso.eu/kennisbank/php2shell-kritieke-lekken-in-php/Response evidence
  2. https://www.nso.eu/vertrouwenscentrum/https://www.nso.eu/vertrouwenscentrum/Service and operation documentation

Webmail on selected dedicated servers

Response status
Webmail remains disabled
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 27 update still keeps webmail disabled on selected dedicated servers while mail itself continues working.

Scope: Limited to browser webmail on selected dedicated servers, not a complete mail-delivery outage.

What users should do

Ask NSO about restoration and available mail access methods for your server.

Source URLs

  1. NSO: PHP vulnerability responsehttps://www.nso.eu/kennisbank/php2shell-kritieke-lekken-in-php/Response evidence
  2. https://www.nso.eu/vertrouwenscentrum/https://www.nso.eu/vertrouwenscentrum/Service and operation documentation
Related official sources
  1. NSO: PHP vulnerability responseOfficial notice

Comments