PHP Vulnerability Responses by Company

Outpost24

Global hosting
Aliases / services
Outpost24 / Outpost24 AB / outpost24.com / Specops / Specops Software / Outscan / HIAB / EASM
Official website
https://outpost24.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Outpost24 EASM

Response status
Product unaffected; PHP asset identification
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Outpost24 products do not use PHP. EASM provides guidance and filters for identifying PHP sites.

Scope: Product impact is separate from customer assets and the public corporate website.

What users should do

Verify discovered assets' versions and patches; unknown-version findings need manual confirmation.

Official service URL

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

Outscan

Response status
Product unaffected; PHP checks available
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Outscan provides version-based checks and improved unauthenticated detection on October22 evening.

Scope: Hidden versions can evade detection; no findings is not proof of safety.

What users should do

Use authenticated checks or administrator confirmation and patch PHP.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

HIAB

Response status
Product unaffected; PHP checks available
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

HIAB provides version-based PHP checks; unauthenticated scans have version and configuration limitations.

Scope: Hidden versions can evade detection; no findings is not proof of safety.

What users should do

Use authenticated checks or administrator confirmation and patch PHP.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

SWAT

Response status
Product unaffected; testing updated
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Active testing scripts incorporate new techniques from October21–22; findings are delivered after review.

Scope: Protection or configuration can prevent detection; customer remediation is not implied.

What users should do

Review findings and patch PHP without waiting for results.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

DAST Expert

Response status
Product unaffected; testing updated
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Active testing scripts incorporate new techniques from October21–22; findings are delivered after review.

Scope: Protection or configuration can prevent detection; customer remediation is not implied.

What users should do

Review findings and patch PHP without waiting for results.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

Snapshot

Response status
Product unaffected; testing updated
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Active testing scripts incorporate new techniques from October21–22; findings are delivered after review.

Scope: Protection or configuration can prevent detection; customer remediation is not implied.

What users should do

Review findings and patch PHP without waiting for results.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

Assure

Response status
Product unaffected; testing updated
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Active testing scripts incorporate new techniques from October21–22; findings are delivered after review.

Scope: Protection or configuration can prevent detection; customer remediation is not implied.

What users should do

Review findings and patch PHP without waiting for results.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence

Outpost24 public website

Response status
Patched and restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The externally hosted public website was patched and restored on October21 evening.

Scope: outpost24.com public site, isolated from customer products and portals.

What users should do

Use the official website normally.

Source URLs

  1. Outpost24: Product and public website impacthttps://kb.outpost24.com/kb/critical-php-remote-code-execution-vulnerabilitiesResponse evidence
Related official sources
  1. Outpost24: PHP vulnerability responseOfficial notice
  2. Outpost24: Operator informationOfficial information directory
  3. Outpost24: Product and public website impactOfficial notice

Comments