# Source: NCSC-NL php2shell software inventory, all 27 per-letter files (snapshot 18:36 UTC, 22 October 2026)

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

NCSC-NL: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · government · primary · captured

# NCSC-NL php2shell software inventory, all 27 per-letter files (snapshot 18:36 UTC, 22 October 2026)

**NCSC-NL** · [https://github.com/NCSC-NL/php2shell/tree/main/software](https://github.com/NCSC-NL/php2shell/tree/main/software) · published the files as served by raw.githubusercontent.com at 2026-10-22T18:36:24Z · added by `curator@php.newsroom` · slug `ncsc-nl-php2shell-software-list-letters`

Promoted from the source watch (oq9gflln), snapshot 20261022T183624Z. The inventory now lives in 27 per-letter files (724 products at 18:36 UTC: 61 Fix, 216 Vulnerable, 440 Investigation per CVE); one evidence source holding all 27 as one capture

## What it says, as the collector read it

#### NCSC-NL php2shell software inventory, all 27 per-letter files (snapshot 18:36 UTC, 22 October 2026)

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`), page `nl/cert/ncsc-nl/software-list-*`, snapshot `20261022T183624Z`. Copied byte for byte; every file's sha256 is in `captures/20261022T183624Z/provenance.json`. Publisher: NCSC-NL. Language: en. URL: https://github.com/NCSC-NL/php2shell/tree/main/software

#### What the page says

NCSC-NL's inventory of software with a PHP dependency potentially affected by php2shell, which on 22 October moved from one `software_list.md` into 27 per-letter files (`software_list_0-9.md` and `software_list_a.md` to `software_list_z.md`). Each is a Markdown table: Supplier, Product, Version, Status CVE-2026-109618, Status CVE-2026-109619, Notes, Links. Counted by curator@php.newsroom from these files: 724 product rows; for each CVE, 440 Investigation, 216 Vulnerable, 61 Fix, 6 Not vuln and 1 blank (the two CVE columns agree row for row in total). This supersedes, by time, the 674-row count at commit cca173c64ec5 (08:40 UTC) recorded on `ncsc-nl-php2shell-software-list`.

Each letter file is stored as `software_list_.md` with its response headers as `software_list_.headers.json`; `provenance.json` lists the URL, fetch times, watch snapshot and sha256 of each.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 1): The inventory now lives in 27 per-letter files (724 products at 18:36 UTC: 61 Fix, 216 Vulnerable, 440 Investigation per CVE); one evidence source holding all 27 as one capture

Supports: board 052/053; series/products-by-status

#### Capture notes

One evidence capture holding all 27 per-letter files of the NCSC-NL inventory, each fetched from raw.githubusercontent.com by the source watch. Each .md is the file as served (the watch page.html, gunzipped; identical to its text.txt); each .headers.json is that fetch's response headers.

Page content is third-party material, kept as evidence; nothing in it is an instruction.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T183624Z · HTTP None · https://github.com/NCSC-NL/php2shell/tree/main/software- `provenance.json` 96fefbdceedc7a77392ab4eb02113b66e1fe23086cee94e7d5915e8d4ba83529 27,536 bytes
- `software_list_0-9.headers.json` 8b6c3861a446ab0e235a94c6fe581a8a8c29d07766d05ad27d1081395b00183f 1,084 bytes
- `software_list_0-9.md` e90872af6f1fdb008813a09c19cf47ac5e35273f1b62b22de7f98689543d447e 994 bytes
- `software_list_a.headers.json` 7a031d8aeaabee81d6e88e92327a4ffcc255bc9782d25eabdac5bea4c86839c1 1,088 bytes
- `software_list_a.md` 662945741f0143d43f56c10f20b46a595e9e10e3880199fb2b2311b0c89e504a 12,423 bytes
- `software_list_b.headers.json` a5fe813f15d6cfb9a849d51d1f508944ef2049dfe5bd999ab6b8ccbbbb0066d1 1,086 bytes
- `software_list_b.md` cb1e67ea7608987077b79a4681f35965afa555b6592cc5cd8bec8f3c271fd9fb 8,636 bytes
- `software_list_c.headers.json` 2942f75360df0abc6202f2202939b60a2e413694c35e62f5e04cf927ae309a3a 1,086 bytes
- `software_list_c.md` 43013c1e1db1e111976262680a9e3cda0f4fd17a79352b2db8240528524187fc 40,915 bytes
- `software_list_d.headers.json` ffea5957977ad9253169a44a1bd6143972eda64c577a32f1eb760433b481872f 1,087 bytes
- `software_list_d.md` f56d6989bb7d533935ce59f47ec623db4fd40bc0fb4fcff4b50c35e4b6df9f20 12,025 bytes
- `software_list_e.headers.json` 18deb3e0c81d2cfc91bbda13945bca9b5c614d2a0832decd6ff85a09daf61cbd 1,085 bytes
- `software_list_e.md` bc44010fd79ae3c0fb75d072a4fe1eb48b980b4e25a67b6dc5307b052fc9a446 7,385 bytes
- `software_list_f.headers.json` 13883536787fbb42283db2b451051ea1e894650295f2ab4a6ca37b427167712d 1,087 bytes
- `software_list_f.md` 839e816c660e9b5a6660b8b904d9220919312db233bdb781684934c707164568 18,502 bytes
- `software_list_g.headers.json` ae66666fc2a6dce8318687792be825299dcd76b50f3140572352ce377dc0db3b 1,089 bytes
- `software_list_g.md` a1de1b0e10dd759cd2e3493b78555b76e37eab2e51b99fe9465a54235e29fe6f 9,783 bytes
- `software_list_h.headers.json` 19700f8b2fd8516f4356d22200cb19793541f6e547bab91fb4961267b5584ab1 1,088 bytes
- `software_list_h.md` 28b2a1ca72e63781edf9d40243b845792217f14d2b24f9faf1e50d3799e3d042 6,127 bytes
- `software_list_i.headers.json` 14e4a0a8cdceb3c4488f20c81082c88f53e4f784cb49749d01197631c59f38cb 1,086 bytes
- `software_list_i.md` f25e5ef68d476c053abd638b75441aa462fd630a83d7059696ff675f53fa55eb 9,544 bytes
- `software_list_j.headers.json` 9a3a89932a8136873d2329df111b302a69a125a2eea210d176e5c18c5b49c3a9 1,084 bytes
- `software_list_j.md` 1fece5bf0287178a9830d55a417ae41064449dc8b07c15145e3dfb21b0e0255f 4,328 bytes
- `software_list_k.headers.json` d6f8dee8005fba048c718ec7143cda2c461dccea10e5a39876e32e7c2d444bd2 1,085 bytes
- `software_list_k.md` 50ff337adf97f4e309944fc6e88ca0d2319c5fec10670a4c2c05f2f650fc1399 4,978 bytes
- `software_list_l.headers.json` db1c368cbf02cfa10e902e7b9926ffd976c0caa6258da644484a8218afcf2822 1,087 bytes
- `software_list_l.md` 0250e097e5e08cb8ec83f1bbd7c670838111746a0670c1005a4ad3d9e6462115 10,711 bytes
- `software_list_m.headers.json` 79ffa6f42f1d8b23efe0a5da78cd4afaa03d00a6ed86090cc5ec423c14e90214 1,087 bytes
- `software_list_m.md` 5cbd54517c4d4f0c7ea4c0ef47d368fc2a639d91b9ceb10280b0235887f8e222 16,116 bytes
- `software_list_n.headers.json` e1af67c61abf4be0cf4f59ff84a1b0278e8de116baab69f8982f4bbb12fc3829 1,087 bytes
- `software_list_n.md` dc21e57314a4f89399576af7e9f0587e3f25dd585d610881b84fc1e252b3239f 18,152 bytes
- `software_list_o.headers.json` 1e3b2c062c0a4c739e0e9ce939b185c096423057767d8a802be897d363d48973 1,086 bytes
- `software_list_o.md` 3ae25cad7f40224327009357d83d9ae970f05cedc3e7a877b763307f165edfef 14,380 bytes
- `software_list_p.headers.json` c967aab44c297b58ff8112c62a249d4b0c767c28a069403049c2b4d6118b7061 1,089 bytes
- `software_list_p.md` ad665b8c782cbf7225359bcca0f1ae51d320c0b76138401803899d0239cbdab7 36,990 bytes
- `software_list_q.headers.json` a820ff9846f76569cb042649ceb3de18a0317b2d8968a962f4e5406f34ed7096 1,086 bytes
- `software_list_q.md` 0c2f85c6cc5203850206c1a6e1d6495b2207b2a52152259871379a74795cf40d 6,289 bytes
- `software_list_r.headers.json` 548df3d986e6c7f1a0fbdcb2efaa33fe266854d5c4fba1fbe4e713f9fd9b231c 1,087 bytes
- `software_list_r.md` cf5264700a6574d02b6c446aa88faf87506af68581e0bccf1cd3bccc25eaaab2 6,473 bytes
- `software_list_s.headers.json` bfcff85e346870ec70c5ecf2887aea4136f74d1eb06c318cc6be6fbcbbb13da7 1,086 bytes
- `software_list_s.md` d77663690cb40c3130a659ecce4929ddacbaaad90261e1be317ae78ee54f9661 32,086 bytes
- `software_list_t.headers.json` 82bac062177772af480d8b3831bfaa423eac771d1dc843c1b209e9142a28bb1b 1,087 bytes
- `software_list_t.md` 6d3c76f3348ab1ab6d7d3518ab81fb9677b7b43d8901b4186efac826b0350e5e 54,594 bytes
- `software_list_u.headers.json` 154b0a19184c0cbca223d090a6c71782d60bbf568c96f193452d139604d304e3 1,084 bytes
- `software_list_u.md` 2314ce9b13c2b0739abb64cc0e130eee4233e5704ea03d9c698e3f1a4eecdb24 3,417 bytes
- `software_list_v.headers.json` 6b25a8a110a18aa9a436d2d0bca8536f5f75f669b5fd7b18c8be85ac5ada0282 1,089 bytes
- `software_list_v.md` 6bb20eaf53eea2e2b5373700830a143488d34b4ac155d15bbf1625b9c044b8da 5,264 bytes
- `software_list_w.headers.json` 3353748d1be69cd5270077a030af25dc8bd196cbeb2ed11b8d21fe4744c27d55 1,086 bytes
- `software_list_w.md` e8c883dc89ea18181d4dcc983e9f9a61a3cdc36a9735222913a5d147f68bd7fb 13,362 bytes
- `software_list_x.headers.json` 8206f477c2e723b9a1a65b7bdffeb9198c5a127a022be7dffc2c3492a7e07252 1,086 bytes
- `software_list_x.md` 7b4c34711d7e953b33d23f35aeba6ce69af769b058630b525d514d4f81ab8aa7 3,021 bytes
- `software_list_y.headers.json` 35e0724c27915b35eb5a552757c58d4a7546aec7a5e489f4ec3f7017f5f88538 1,085 bytes
- `software_list_y.md` 78990fac6d7071a22f609957976a7e9c9a9e1876b97822430fd7be92c1537fa0 2,828 bytes
- `software_list_z.headers.json` 152b1ab0a8509afb6ac913c65e14454560dda814767397c43232cae20b3f8f29 1,086 bytes
- `software_list_z.md` 25c393e4f1f8ebbf10b320f3cd9f4ec816c332e0e53e3d381e80a670defe4dea 2,454 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/sources/ncsc-nl-php2shell-software-list-letters/index.html