PHP Vulnerability Responses by Company

PaperCut Software Pty Ltd

Global cloud / infrastructure
Aliases / services
PaperCut / PaperCut Software Pty Ltd / PaperCut NG / PaperCut MF / PaperCut Pocket / PaperCut Hive / ACN 650500413 / papercut.com
Official website
https://www.papercut.com
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PaperCut NG

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Print management software.

NG does not use PHP. sample.php is a reference example, not its runtime.

Scope: MF, Pocket and Hive are separate services.

What users should do

No NG-specific fix required; review custom PHP integrations separately.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.papercut.com/kb/Main/security-vulnerability-log/Response evidence
  2. Operating entityhttps://www.papercut.com/privacy-policy/Service and operation documentation

PaperCut MF

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The vendor states this product does not use PHP and is unaffected.

Scope: PaperCut MF only.

What users should do

No product-specific PHP2Shell action; separately review custom PHP integrations.

Source URLs

  1. PHP2Shell response and scopehttps://www.papercut.com/kb/Main/security-vulnerability-log/Response evidence
  2. Operating entityhttps://www.papercut.com/privacy-policy/Service and operation documentation
  3. https://www.papercut.com/help/manuals/ng-mf/common/license/https://www.papercut.com/help/manuals/ng-mf/common/license/Service and operation documentation
  4. https://www.papercut.com/help/manuals/pocket-hive/help-resources/eula/https://www.papercut.com/help/manuals/pocket-hive/help-resources/eula/Service and operation documentation

PaperCut Pocket

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The vendor states this product does not use PHP and is unaffected.

Scope: PaperCut Pocket only.

What users should do

No product-specific PHP2Shell action; separately review custom PHP integrations.

Source URLs

  1. PHP2Shell response and scopehttps://www.papercut.com/kb/Main/security-vulnerability-log/Response evidence
  2. Operating entityhttps://www.papercut.com/privacy-policy/Service and operation documentation
  3. https://www.papercut.com/help/manuals/ng-mf/common/license/https://www.papercut.com/help/manuals/ng-mf/common/license/Service and operation documentation
  4. https://www.papercut.com/help/manuals/pocket-hive/help-resources/eula/https://www.papercut.com/help/manuals/pocket-hive/help-resources/eula/Service and operation documentation

PaperCut Hive

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The vendor states this product does not use PHP and is unaffected.

Scope: PaperCut Hive only.

What users should do

No product-specific PHP2Shell action; separately review custom PHP integrations.

Source URLs

  1. PHP2Shell response and scopehttps://www.papercut.com/kb/Main/security-vulnerability-log/Response evidence
  2. Operating entityhttps://www.papercut.com/privacy-policy/Service and operation documentation
  3. https://www.papercut.com/help/manuals/ng-mf/common/license/https://www.papercut.com/help/manuals/ng-mf/common/license/Service and operation documentation
  4. https://www.papercut.com/help/manuals/pocket-hive/help-resources/eula/https://www.papercut.com/help/manuals/pocket-hive/help-resources/eula/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments