Teclib
- Aliases / services
- GLPI / GLPI Network Cloud / テクリブ / Teclib
- Official website
- https://www.teclib-edition.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
GLPI (self-hosted / on-premises)
- Response status
- PHP update required from operator
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Provider of GLPI IT asset and service management software.
The notice concerns underlying PHP rather than GLPI's own code. Updating GLPI alone does not resolve both CVEs.
Scope: CLI PHP may differ from web PHP. GLPI Network Cloud and official Docker images are listed separately.
What users should do
Check active web PHP in GLPI system settings, apply the distribution's fixed package/backport and restart web/PHP-FPM services.
Official service URL
Source URLs
- GLPI php2shell responsehttps://www.glpi-project.org/en/%F0%9F%9A%A8-critical-php2shell-php-vulnerabilities-cve-2026-109618-cve-2026-109619-what-you-need-to-know-for-your-glpi-server/Response evidence
GLPI Network Cloud
- Response status
- Provider reports patching completed
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The provider reports every GLPI Cloud server patched as of21October14:00UTC.
Scope: Cloud only. No exploitation signs is the provider's monitoring statement, not an independent guarantee.
What users should do
The notice says no customer patch action is required; contact support for environment-specific questions.
Source URLs
- GLPI php2shell responsehttps://www.glpi-project.org/en/%F0%9F%9A%A8-critical-php2shell-php-vulnerabilities-cve-2026-109618-cve-2026-109619-what-you-need-to-know-for-your-glpi-server/Response evidence
Official GLPI Docker images
- Response status
- Fixed images available; recreate containers
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The provider reports rebuilding main,12,11 and10 images with patched PHP.
Scope: Image availability does not establish deployment in customer environments; check persistent-volume configuration.
What users should do
Pull the updated image and recreate containers. Restarting an existing container alone retains the old image.
Source URLs
- GLPI php2shell responsehttps://www.glpi-project.org/en/%F0%9F%9A%A8-critical-php2shell-php-vulnerabilities-cve-2026-109618-cve-2026-109619-what-you-need-to-know-for-your-glpi-server/Response evidence
Related official sources
- GLPI php2shell responseOfficial notice
Comments