PHP Vulnerability Responses by Company

PandaDoc

Global cloud / infrastructure
Aliases / services
PandaDoc / PandaDoc Inc. / pandadoc.com
Official website
https://www.pandadoc.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PandaDoc application and cloud infrastructure

Response status
Reported unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Electronic signature, document creation and workflow service.

The October 23 PHP2Shell assessment reports no vulnerable PHP runtime components or exposure.

Scope: Separate from other vulnerabilities covered on the bulletin page.

What users should do

No customer action is required.

Official service URL

Source URLs

  1. PandaDoc security bulletinshttps://support.pandadoc.com/en/articles/17720235-pandadoc-security-bulletinsResponse evidence
Related official sources
  1. PandaDoc security bulletinsOfficial notice

Comments