SolarWinds
- Aliases / services
- SolarWinds / SolarWinds Worldwide LLC / Pingdom / solarwinds.com
- Official website
- https://www.solarwinds.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
SolarWinds Pingdom
- Response status
- Compensating controls applied
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
IT operations and monitoring software.
The advisory says Pingdom uses PHP and the vulnerabilities are addressed through compensating controls. It does not confirm completed PHP package updates or a fixed build.
Scope: Limited to Pingdom; public websites are a separate scope, not a blanket statement about all SolarWinds products.
What users should do
SolarWinds states no customer action is required; check independently managed PHP environments separately.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.solarwinds.com/trust-center/security-advisories/cve-2026-109618-and-cve-2026-109619Response evidence
- https://www.solarwinds.com/trust-center/security-advisorieshttps://www.solarwinds.com/trust-center/security-advisoriesService and operation documentation
SolarWinds public-facing websites
- Response status
- Compensating controls applied
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The advisory says compensating controls address the issue on some external websites using PHP. It does not confirm a specific PHP update.
Scope: Limited to SolarWinds public websites, separate from Pingdom and other products.
What users should do
SolarWinds states no customer action is needed; report service issues to support.
Source URLs
- PHP2Shell response and scopehttps://www.solarwinds.com/trust-center/security-advisories/cve-2026-109618-and-cve-2026-109619Response evidence
Related official sources
- PHP2Shell response and scopeOfficial notice
Comments