Protocol only
Vendors that ship PHP
The question
Which of the most-exploited vendors say their products carry the PHP flaws of 21 October 2026, on which PHP branch, and when do their fixes appear?
What the record says
The protocol follows statements and fixes from 20 vendors chosen by their counts in CISA’s exploited-flaw catalogue. Its unreviewed 5 November checkpoint found six vendors naming the flaws, seven with no statement found, five unreadable and two without a channel; Google first named carried PHP branches on 2 November.
Check the summary against the record
Follow the connections
These are explicit references between records. The link itself does not establish support or intellectual influence.
Referenced by this record
- Where does a software update go? investigation
Dated checkpoints · 4
Navigation summary checked against the retained record. A record being written does not by itself mean that its study or investigation has ended.