PHP Vulnerability Responses by Company

Paessler

Global hosting
Aliases / services
Paessler / Paessler GmbH / paessler.com / PRTG / PRTG Network Monitor / PRTG Enterprise Monitor / PRTG Hosted Monitor
Official website
https://www.paessler.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PRTG Network Monitor

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October advisory states that the core server, web interface, probes, APIs and bundled dependencies contain no PHP and are unaffected.

Scope: Network Monitor only. The official article carries a no-longer-maintained warning and remains listed in the latest knowledge base.

What users should do

No PRTG update is required for this issue. Check and update separately installed PHP in your environment.

Official service URL

Source URLs

  1. Paessler: PHP vulnerability responsehttps://helpdesk.paessler.com/en/support/solutions/articles/76000089595-security-advisory-php2shell-cve-2026-109618-cve-2026-109619-Response evidence
  2. https://helpdesk.paessler.com/en/support/solutionshttps://helpdesk.paessler.com/en/support/solutionsService and operation documentation
  3. https://www.paessler.com/contacthttps://www.paessler.com/contactService and operation documentation

PRTG Enterprise Monitor

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The advisory states that the core, web interface, probes, APIs and bundled dependencies contain no PHP.

Scope: The official article carries a no-longer-maintained warning. Do not extend this finding to other Paessler products.

What users should do

No PRTG update operation is required for this incident. Review independently operated PHP separately.

Source URLs

  1. Paessler: PHP vulnerability responsehttps://helpdesk.paessler.com/en/support/solutions/articles/76000089595-security-advisory-php2shell-cve-2026-109618-cve-2026-109619-Response evidence
  2. https://helpdesk.paessler.com/en/support/solutionshttps://helpdesk.paessler.com/en/support/solutionsService and operation documentation
  3. https://www.paessler.com/contacthttps://www.paessler.com/contactService and operation documentation

PRTG Hosted Monitor

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The advisory says the hosting infrastructure serving customer instances does not use PHP. WAF rules for known attack patterns are also active as additional protection.

Scope: The official article carries a no-longer-maintained warning. Do not extend this finding to other Paessler products.

What users should do

No PRTG update operation is required for this incident. Review independently operated PHP separately.

Source URLs

  1. Paessler: PHP vulnerability responsehttps://helpdesk.paessler.com/en/support/solutions/articles/76000089595-security-advisory-php2shell-cve-2026-109618-cve-2026-109619-Response evidence
  2. https://helpdesk.paessler.com/en/support/solutionshttps://helpdesk.paessler.com/en/support/solutionsService and operation documentation
  3. https://www.paessler.com/contacthttps://www.paessler.com/contactService and operation documentation
Related official sources
  1. Paessler: PHP vulnerability responseOfficial notice
  2. Paessler: operating-company informationOfficial information directory

Comments