PHP Vulnerability Responses by Company

ProjectDiscovery, Inc.

Global cloud / infrastructure
Aliases / services
ProjectDiscovery / ProjectDiscovery Inc. / Nuclei / Neo / SecureTheWeb.org / projectdiscovery.io / ProjectDiscovery, Inc.
Official website
https://projectdiscovery.io/
Sources identifying the operating company

Contracting provider of PDCP and Neo. Open-source Nuclei has separate licensing terms.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Nuclei PHP2Shell template

Response status
Detection template published
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Vulnerability testing and attack-surface management.

The CVE-2026-109618 template checks PHP version disclosure; it does not exploit or patch the vulnerability.

Scope: Version-banner checks are limited by hidden versions and vendor backports.

What users should do

Use on authorized assets and verify results against actual package fixes.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://projectdiscovery.io/research/php2shellResponse evidence

Neo

Response status
Remediation assistance and information
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Describes a workflow to find affected systems and assist PHP2Shell remediation.

Scope: Not confirmation that a customer's environment has been patched.

What users should do

Validate guidance against your environment, then apply and verify fixes.

Source URLs

  1. PHP2Shell response and scopehttps://projectdiscovery.io/research/php2shellResponse evidence

SecureTheWeb.org

Response status
Remediation assistance and information
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Describes matching observed services with affected versions and notifying domain security contacts with remediation information.

Scope: Not confirmation that a customer's environment has been patched.

What users should do

Validate guidance against your environment, then apply and verify fixes.

Source URLs

  1. PHP2Shell response and scopehttps://projectdiscovery.io/research/php2shellResponse evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments