SecurityScorecard, Inc.
- Aliases / services
- SecurityScorecard / SecurityScorecard Inc. / CVEdetails.com / TITAN Secure / Driftnet / securityscorecard.com / SecurityScorecard, Inc.
- Official website
- https://securityscorecard.com
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
SecurityScorecard platform
- Response status
- Platform unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Company and vendor security ratings.
SecurityScorecard states its platform was not exposed and platform customer data was unaffected. Its PHP-based CVEdetails.com property was patched separately.
Scope: Covers the SecurityScorecard platform, not customer or third-party PHP environments.
What users should do
No customer update for these vulnerabilities is required.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://securityscorecard.com/blog/php2shell-customer-advisory-cve-2026-109618-and-cve-2026-109619-remediation-guide/Response evidence
- https://securityscorecard.com/blog/https://securityscorecard.com/blog/Service and operation documentation
- https://securityscorecard.com/eusahttps://securityscorecard.com/eusaService and operation documentation
CVEdetails.com
- Response status
- Patch applied
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
SecurityScorecard states it patched the affected PHP on its CVEdetails.com property immediately after the fix was released on October 21.
Scope: The SecurityScorecard-owned CVEdetails.com property, separate from the main platform.
What users should do
Use normally.
Source URLs
- PHP2Shell response and scopehttps://securityscorecard.com/blog/php2shell-customer-advisory-cve-2026-109618-and-cve-2026-109619-remediation-guide/Response evidence
- https://securityscorecard.com/blog/https://securityscorecard.com/blog/Service and operation documentation
- https://securityscorecard.com/eusahttps://securityscorecard.com/eusaService and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments