Octopus ITSM
- Aliases / services
- Octopus ITSM / Octopus-ITSM.com Inc. / DAZZM / MyOctopus / Octopus WinUI / Octopus WebUI / Octopus 5
- Official website
- https://www.octopus-itsm.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Listed services and systems
- Response status
- WinUI, WebUI and Octopus 5 unaffected
- Response information checked
- 2026-10-27 Rechecked: 2026-10-27
IT service management software from Octopus-ITSM.com Inc., formerly branded DAZZM.
The official review finds that the Windows client, web portal and Octopus 5 use .NET without a PHP parser or PHP-dependent components and are not affected by these vulnerabilities.
What users should do
No Octopus update is required. Check the relevant vendor guidance for separate PHP-based products on the same server or in connected environments.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://status.octopus-itsm.com/en/articles/two-critical-vulnerabilities-php-programming-language-have-been-published-october-21-2026Response evidence
- Operating entityhttps://status.octopus-itsm.com/en/articles/change-code-signing-certificateService and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments