Panopto
- Aliases / services
- Panopto / Panopto Inc.
- Official website
- https://www.panopto.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Listed services and systems
- Response status
- Core unaffected; check LMS integrations
- Response information checked
- 2026-10-27 Rechecked: 2026-10-27
Video-management platform from Panopto Inc.
The 22 October notice says the core platform and hosted service do not use PHP. Moodle and ILIAS plugins run PHP in the customer's LMS environment and require separate attention.
What users should do
LMS administrators should check and patch their PHP runtime or contact their operator, restricting exposure until addressed.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://community.panopto.com/discussion/3004/notification-of-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619Response evidence
- Operating entityhttps://www.panopto.com/terms-of-service/Service and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments