PHP Vulnerability Responses by Company

OpenText

Global cloud / infrastructure
Aliases / services
OpenText / Open Text Corporation / OpenText Advanced Authentication / opentext.com
Official website
https://www.opentext.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Listed Advanced Authentication versions unaffected
Response information checked
2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Enterprise information management and authentication provider.

The advisory covers Advanced Authentication 6.4.3.x, 6.5.x and 6.6.x, stating these versions are unaffected by both CVEs.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Check your Advanced Authentication version. Assess other OpenText products through their individual advisories or support.

Official service URL

Source URLs

  1. Advanced Authentication version assessmenthttps://my.opentext.com/support/article/opentext-advanced-authentication-643-65-and-66-not-affected-by-php2shell-vulnerabilities-cve-2026-109618-and-cve-2026-109619/11206727Response evidence
  2. https://my.opentext.com/support/article/11206727https://my.opentext.com/support/article/11206727Service and operation documentation
  3. https://my.opentext.com/support/products/advanced-authenticationhttps://my.opentext.com/support/products/advanced-authenticationService and operation documentation

OpenText SIEM / ArcSight ESM PHP2Shell content

Response status
Detection content available
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Marketplace offers package 1.0.0.0 correlating vulnerability events, IDS/IPS alerts and suspicious post-exploitation processes.

Scope: OpenText Community content for SIEM 7.0, 7.2 and 7.6. Alerts alone do not prove successful exploitation.

What users should do

Check compatibility and test before production; separately patch PHP.

Source URLs

  1. https://marketplace.opentext.com/cybersecurity/content/siem-php2shell-detectionhttps://marketplace.opentext.com/cybersecurity/content/siem-php2shell-detectionResponse evidence
  2. https://community.opentext.com/cybersec/threat-detect-response/w/tips/54230/siem-php2shell-detection-is-now-available-in-the-opentext-marketplacehttps://community.opentext.com/cybersec/threat-detect-response/w/tips/54230/siem-php2shell-detection-is-now-available-in-the-opentext-marketplaceResponse evidence
Related official sources
  1. Advanced Authentication version assessmentOfficial notice

Comments