Supermicro
- Aliases / services
- Supermicro / Super Micro Computer, Inc. / Super Micro / SuperDoctor / SuperCloud Composer / Supermicro Server Manager / supermicro.com
- Official website
- https://www.supermicro.com
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Supermicro servers, BIOS, BMC and CMM
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Server hardware and management software.
Supermicro states these components do not incorporate PHP and are unaffected.
Scope: Customer applications on the host OS are outside scope.
What users should do
Check separately installed customer PHP.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.supermicro.com/en/support/security_PHP_Oct26Response evidence
- https://www.supermicro.com/en/support/security_centerhttps://www.supermicro.com/en/support/security_centerService and operation documentation
Supermicro Server Manager
- Response status
- Unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Explicitly listed as PHP-free.
Scope: Product named in the advisory.
What users should do
No PHP update required.
Source URLs
- PHP2Shell response and scopehttps://www.supermicro.com/en/support/security_PHP_Oct26Response evidence
- https://www.supermicro.com/en/support/security_centerhttps://www.supermicro.com/en/support/security_centerService and operation documentation
SuperDoctor
- Response status
- Unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Explicitly listed as PHP-free.
Scope: Product named in the advisory.
What users should do
No PHP update required.
Source URLs
- PHP2Shell response and scopehttps://www.supermicro.com/en/support/security_PHP_Oct26Response evidence
- https://www.supermicro.com/en/support/security_centerhttps://www.supermicro.com/en/support/security_centerService and operation documentation
Supermicro IPMI tools
- Response status
- Unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Explicitly listed as PHP-free.
Scope: Product named in the advisory.
What users should do
No PHP update required.
Source URLs
- PHP2Shell response and scopehttps://www.supermicro.com/en/support/security_PHP_Oct26Response evidence
- https://www.supermicro.com/en/support/security_centerhttps://www.supermicro.com/en/support/security_centerService and operation documentation
SuperCloud Composer
- Response status
- Unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Explicitly listed as PHP-free.
Scope: Product named in the advisory.
What users should do
No PHP update required.
Source URLs
- PHP2Shell response and scopehttps://www.supermicro.com/en/support/security_PHP_Oct26Response evidence
- https://www.supermicro.com/en/support/security_centerhttps://www.supermicro.com/en/support/security_centerService and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments