PHP Vulnerability Responses by Company

Tenable

Global cloud / infrastructure
Aliases / services
テナブル / Nessus / Tenable Enclave Security / Tenable
Official website
https://www.tenable.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Tenable Enclave Security

Response status
SC-202610.2 available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides vulnerability management and security products.

Affected: 1.9.1 and earlier. Patches for 1.7.0/1.8.0/1.9.1 install PHP 8.2.35.

Scope: Separate from Nessus detection.

What users should do

Apply the supported patch or upgrade path.

Official service URL

Source URLs

  1. TNS-2026-31: PHP fixes for Enclave Securityhttps://www.tenable.com/security/tns-2026-31Response evidence

Tenable Nessus

Response status
Detection available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Plugin 369483 checks reported PHP versions.

Scope: It does not test actual exploitation.

What users should do

Update plugins; use credentialed or agent scanning.

Source URLs

  1. Nessus: PHP2Shell detection pluginhttps://www.tenable.com/plugins/nessus/369483Response evidence

Tenable Security Center

Response status
SC-202610.2 available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected: 6.9.1 and earlier. Patches for 6.6.0/6.7.2/6.8.0/6.9.1 install PHP 8.2.35.

Scope: Separate from Enclave Security.

What users should do

Apply the supported patch or upgrade path.

Source URLs

  1. https://www.tenable.com/security/tns-2026-30https://www.tenable.com/security/tns-2026-30Response evidence

Tenable Cloud Security

Response status
Dedicated view available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

A PHP2Shell view lists detected exposure.

Scope: Coverage depends on detected assets.

What users should do

Review Risk → Emerging Threats and remediate.

Source URLs

  1. https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remotehttps://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remoteResponse evidence

Tenable One Web App Scanning

Response status
Detection plugins available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Plugins 115719–115722 inspect exposed PHP versions.

Scope: No exposed version can limit detection.

What users should do

Update plugins and scan applications.

Source URLs

  1. https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remotehttps://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remoteResponse evidence
Related official sources
  1. TNS-2026-31: PHP fixes for Enclave SecurityOfficial notice
  2. Nessus: PHP2Shell detection pluginOfficial notice

Comments