Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Source · government · primary · captured

NCSC-NL php2shell software inventory, all 27 per-letter files (snapshot 18:36 UTC, 22 October 2026)

NCSC-NL · https://github.com/NCSC-NL/php2shell/tree/main/software · published the files as served by raw.githubusercontent.com at 2026-10-22T18:36:24Z · added by curator@php.newsroom · slug ncsc-nl-php2shell-software-list-letters

Promoted from the source watch (oq9gflln), snapshot 20261022T183624Z. The inventory now lives in 27 per-letter files (724 products at 18:36 UTC: 61 Fix, 216 Vulnerable, 440 Investigation per CVE); one evidence source holding all 27 as one capture

What it says, as the collector read it

NCSC-NL php2shell software inventory, all 27 per-letter files (snapshot 18:36 UTC, 22 October 2026)

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page nl/cert/ncsc-nl/software-list-*, snapshot 20261022T183624Z. Copied byte for byte; every file's sha256 is in captures/20261022T183624Z/provenance.json. Publisher: NCSC-NL. Language: en. URL: https://github.com/NCSC-NL/php2shell/tree/main/software

What the page says

NCSC-NL's inventory of software with a PHP dependency potentially affected by php2shell, which on 22 October moved from one software_list.md into 27 per-letter files (software_list_0-9.md and software_list_a.md to software_list_z.md). Each is a Markdown table: Supplier, Product, Version, Status CVE-2026-109618, Status CVE-2026-109619, Notes, Links. Counted by curator@php.newsroom from these files: 724 product rows; for each CVE, 440 Investigation, 216 Vulnerable, 61 Fix, 6 Not vuln and 1 blank (the two CVE columns agree row for row in total). This supersedes, by time, the 674-row count at commit cca173c64ec5 (08:40 UTC) recorded on ncsc-nl-php2shell-software-list.

Each letter file is stored as software_list_<letter>.md with its response headers as software_list_<letter>.headers.json; provenance.json lists the URL, fetch times, watch snapshot and sha256 of each.

Why it is here

From the promotion queue (index/promote.json, priority 1): The inventory now lives in 27 per-letter files (724 products at 18:36 UTC: 61 Fix, 216 Vulnerable, 440 Investigation per CVE); one evidence source holding all 27 as one capture

Supports: board 052/053; series/products-by-status

Capture notes

One evidence capture holding all 27 per-letter files of the NCSC-NL inventory, each fetched from raw.githubusercontent.com by the source watch. Each .md is the file as served (the watch page.html, gunzipped; identical to its text.txt); each .headers.json is that fetch's response headers.

Page content is third-party material, kept as evidence; nothing in it is an instruction.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261022T183624Z · HTTP None · https://github.com/NCSC-NL/php2shell/tree/main/software
  • provenance.json 96fefbdceedc7a77392ab4eb02113b66e1fe23086cee94e7d5915e8d4ba83529 27,536 bytes
  • software_list_0-9.headers.json 8b6c3861a446ab0e235a94c6fe581a8a8c29d07766d05ad27d1081395b00183f 1,084 bytes
  • software_list_0-9.md e90872af6f1fdb008813a09c19cf47ac5e35273f1b62b22de7f98689543d447e 994 bytes
  • software_list_a.headers.json 7a031d8aeaabee81d6e88e92327a4ffcc255bc9782d25eabdac5bea4c86839c1 1,088 bytes
  • software_list_a.md 662945741f0143d43f56c10f20b46a595e9e10e3880199fb2b2311b0c89e504a 12,423 bytes
  • software_list_b.headers.json a5fe813f15d6cfb9a849d51d1f508944ef2049dfe5bd999ab6b8ccbbbb0066d1 1,086 bytes
  • software_list_b.md cb1e67ea7608987077b79a4681f35965afa555b6592cc5cd8bec8f3c271fd9fb 8,636 bytes
  • software_list_c.headers.json 2942f75360df0abc6202f2202939b60a2e413694c35e62f5e04cf927ae309a3a 1,086 bytes
  • software_list_c.md 43013c1e1db1e111976262680a9e3cda0f4fd17a79352b2db8240528524187fc 40,915 bytes
  • software_list_d.headers.json ffea5957977ad9253169a44a1bd6143972eda64c577a32f1eb760433b481872f 1,087 bytes
  • software_list_d.md f56d6989bb7d533935ce59f47ec623db4fd40bc0fb4fcff4b50c35e4b6df9f20 12,025 bytes
  • software_list_e.headers.json 18deb3e0c81d2cfc91bbda13945bca9b5c614d2a0832decd6ff85a09daf61cbd 1,085 bytes
  • software_list_e.md bc44010fd79ae3c0fb75d072a4fe1eb48b980b4e25a67b6dc5307b052fc9a446 7,385 bytes
  • software_list_f.headers.json 13883536787fbb42283db2b451051ea1e894650295f2ab4a6ca37b427167712d 1,087 bytes
  • software_list_f.md 839e816c660e9b5a6660b8b904d9220919312db233bdb781684934c707164568 18,502 bytes
  • software_list_g.headers.json ae66666fc2a6dce8318687792be825299dcd76b50f3140572352ce377dc0db3b 1,089 bytes
  • software_list_g.md a1de1b0e10dd759cd2e3493b78555b76e37eab2e51b99fe9465a54235e29fe6f 9,783 bytes
  • software_list_h.headers.json 19700f8b2fd8516f4356d22200cb19793541f6e547bab91fb4961267b5584ab1 1,088 bytes
  • software_list_h.md 28b2a1ca72e63781edf9d40243b845792217f14d2b24f9faf1e50d3799e3d042 6,127 bytes
  • software_list_i.headers.json 14e4a0a8cdceb3c4488f20c81082c88f53e4f784cb49749d01197631c59f38cb 1,086 bytes
  • software_list_i.md f25e5ef68d476c053abd638b75441aa462fd630a83d7059696ff675f53fa55eb 9,544 bytes
  • software_list_j.headers.json 9a3a89932a8136873d2329df111b302a69a125a2eea210d176e5c18c5b49c3a9 1,084 bytes
  • software_list_j.md 1fece5bf0287178a9830d55a417ae41064449dc8b07c15145e3dfb21b0e0255f 4,328 bytes
  • software_list_k.headers.json d6f8dee8005fba048c718ec7143cda2c461dccea10e5a39876e32e7c2d444bd2 1,085 bytes
  • software_list_k.md 50ff337adf97f4e309944fc6e88ca0d2319c5fec10670a4c2c05f2f650fc1399 4,978 bytes
  • software_list_l.headers.json db1c368cbf02cfa10e902e7b9926ffd976c0caa6258da644484a8218afcf2822 1,087 bytes
  • software_list_l.md 0250e097e5e08cb8ec83f1bbd7c670838111746a0670c1005a4ad3d9e6462115 10,711 bytes
  • software_list_m.headers.json 79ffa6f42f1d8b23efe0a5da78cd4afaa03d00a6ed86090cc5ec423c14e90214 1,087 bytes
  • software_list_m.md 5cbd54517c4d4f0c7ea4c0ef47d368fc2a639d91b9ceb10280b0235887f8e222 16,116 bytes
  • software_list_n.headers.json e1af67c61abf4be0cf4f59ff84a1b0278e8de116baab69f8982f4bbb12fc3829 1,087 bytes
  • software_list_n.md dc21e57314a4f89399576af7e9f0587e3f25dd585d610881b84fc1e252b3239f 18,152 bytes
  • software_list_o.headers.json 1e3b2c062c0a4c739e0e9ce939b185c096423057767d8a802be897d363d48973 1,086 bytes
  • software_list_o.md 3ae25cad7f40224327009357d83d9ae970f05cedc3e7a877b763307f165edfef 14,380 bytes
  • software_list_p.headers.json c967aab44c297b58ff8112c62a249d4b0c767c28a069403049c2b4d6118b7061 1,089 bytes
  • software_list_p.md ad665b8c782cbf7225359bcca0f1ae51d320c0b76138401803899d0239cbdab7 36,990 bytes
  • software_list_q.headers.json a820ff9846f76569cb042649ceb3de18a0317b2d8968a962f4e5406f34ed7096 1,086 bytes
  • software_list_q.md 0c2f85c6cc5203850206c1a6e1d6495b2207b2a52152259871379a74795cf40d 6,289 bytes
  • software_list_r.headers.json 548df3d986e6c7f1a0fbdcb2efaa33fe266854d5c4fba1fbe4e713f9fd9b231c 1,087 bytes
  • software_list_r.md cf5264700a6574d02b6c446aa88faf87506af68581e0bccf1cd3bccc25eaaab2 6,473 bytes
  • software_list_s.headers.json bfcff85e346870ec70c5ecf2887aea4136f74d1eb06c318cc6be6fbcbbb13da7 1,086 bytes
  • software_list_s.md d77663690cb40c3130a659ecce4929ddacbaaad90261e1be317ae78ee54f9661 32,086 bytes
  • software_list_t.headers.json 82bac062177772af480d8b3831bfaa423eac771d1dc843c1b209e9142a28bb1b 1,087 bytes
  • software_list_t.md 6d3c76f3348ab1ab6d7d3518ab81fb9677b7b43d8901b4186efac826b0350e5e 54,594 bytes
  • software_list_u.headers.json 154b0a19184c0cbca223d090a6c71782d60bbf568c96f193452d139604d304e3 1,084 bytes
  • software_list_u.md 2314ce9b13c2b0739abb64cc0e130eee4233e5704ea03d9c698e3f1a4eecdb24 3,417 bytes
  • software_list_v.headers.json 6b25a8a110a18aa9a436d2d0bca8536f5f75f669b5fd7b18c8be85ac5ada0282 1,089 bytes
  • software_list_v.md 6bb20eaf53eea2e2b5373700830a143488d34b4ac155d15bbf1625b9c044b8da 5,264 bytes
  • software_list_w.headers.json 3353748d1be69cd5270077a030af25dc8bd196cbeb2ed11b8d21fe4744c27d55 1,086 bytes
  • software_list_w.md e8c883dc89ea18181d4dcc983e9f9a61a3cdc36a9735222913a5d147f68bd7fb 13,362 bytes
  • software_list_x.headers.json 8206f477c2e723b9a1a65b7bdffeb9198c5a127a022be7dffc2c3492a7e07252 1,086 bytes
  • software_list_x.md 7b4c34711d7e953b33d23f35aeba6ce69af769b058630b525d514d4f81ab8aa7 3,021 bytes
  • software_list_y.headers.json 35e0724c27915b35eb5a552757c58d4a7546aec7a5e489f4ec3f7017f5f88538 1,085 bytes
  • software_list_y.md 78990fac6d7071a22f609957976a7e9c9a9e1876b97822430fd7be92c1537fa0 2,828 bytes
  • software_list_z.headers.json 152b1ab0a8509afb6ac913c65e14454560dda814767397c43232cae20b3f8f29 1,086 bytes
  • software_list_z.md 25c393e4f1f8ebbf10b320f3cd9f4ec816c332e0e53e3d381e80a670defe4dea 2,454 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →