PHP Vulnerability Responses by Company

Veeam

Global cloud / infrastructure
Aliases / services
Veeam / Veeam Software / Veeam Data Cloud / veeam.com
Official website
https://www.veeam.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Veeam products and SaaS

Response status
Products and SaaS unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Backup and data recovery software provider.

KB4953 states Veeam products and SaaS do not use PHP and are unaffected by both CVEs.

Scope: This does not cover PHP in customer workloads protected or backed up by Veeam.

What users should do

No Veeam product action is required for these vulnerabilities.

Official service URL

Source URLs

  1. Veeam KB4953: PHP2Shellhttps://www.veeam.com/kb4953Response evidence
  2. https://www.veeam.com/knowledge-base.htmlhttps://www.veeam.com/knowledge-base.htmlService and operation documentation
Related official sources
  1. Veeam KB4953: PHP2ShellOfficial notice

Comments