PHP Vulnerability Responses by Company

ServiceNow

Global cloud / infrastructure
Aliases / services
ServiceNow / ServiceNow Inc. / servicenow.com
Official website
https://www.servicenow.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ServiceNow platform

Response status
Platform unaffected
Response information checked
2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Cloud platform for business workflows.

The advisory for both CVEs states that the ServiceNow platform does not use PHP and is unaffected, with related investigation continuing.

Scope: Covers the ServiceNow platform; does not extend to customer PHP systems or separate products.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Check your organization's requirements against the TrustShare advisory and contracted support.

Official service URL

Source URLs

  1. ServiceNow PHP2Shell advisoryhttps://trust.servicenow.com/notifications/73b16da6-6d08-4aaa-914b-55863060a96dResponse evidence
Related official sources
  1. ServiceNow PHP2Shell advisoryOfficial notice; link to this PHP incident unconfirmed

Comments