PHP Vulnerability Responses by Company

Oneleet

Global cloud / infrastructure
Aliases / services
Oneleet / Oneleet Inc. / oneleet.com
Official website
https://www.oneleet.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ASM, Dependency Scanning and Security Program Manager support

Response status
Detection and guidance; user action required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

A US security and compliance provider.

Oneleet reports detecting PHP assets with ASM and Dependency Scanning and notifying affected customers with remediation steps. It does not announce completion of patching across all customer environments.

Scope: This is detection, notification and remediation support. Certification or notification is not equivalent to patch completion.

What users should do

Review detected PHP assets and coordinate patching and verification with your SPM and operators.

Official service URL

Source URLs

  1. PHP2Shell asset detection and customer notificationhttps://www.oneleet.com/blog/php2shell-showed-what-soc-2-was-never-built-to-doResponse evidence
  2. https://www.oneleet.com/blog/php2shell-cve-2026-109618-and-cve-2026-109619-what-to-knowhttps://www.oneleet.com/blog/php2shell-cve-2026-109618-and-cve-2026-109619-what-to-knowService and operation documentation
  3. https://www.oneleet.com/bloghttps://www.oneleet.com/blogService and operation documentation
  4. https://status.oneleet.com/https://status.oneleet.com/Service and operation documentation
Related official sources
  1. PHP2Shell asset detection and customer notificationOfficial notice
  2. Legal operator and termsOfficial information directory

Comments