0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
| Supplier | Product | Version (see Status) | Status CVE-2026-109618 | Status CVE-2026-109619 | Notes | Links |
|---|---|---|---|---|---|---|
| X-Cart | X-Cart 5 | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The versioned developer page requires PHP 8.3-8.4, lists runtime extensions and separately recommends Xdebug for development. |
source | |
| Xdebug / Derick Rethans and contributors | Xdebug PHP Zend instrumentation extension | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown Xdebug documents loading its Zend extension into the chosen PHP SAPI configuration. |
source 1 source 2 |
|
| Xdebug / vscode-php-debug contributors | VS Code PHP Debug adapter external PHP/Xdebug integration | Investigation | Investigation | CVE assessment: Optional PHP path; CVE match unknown The debug-adapter descriptor uses node and out/phpDebug.js. Official README describes Xdebug connections, PHP CLI launch and built-in PHP web-server launch. |
source 1 source 2 |
|
| XenForo Ltd | XenForo | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. Vendor documentation identifies PHP web-server requirements, GD JPEG support and a PHP CLI command interface. |
source | |
| Xerox | Xerox Alphastream Controllers | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Optra & Edge Solutions in the vendor bulletin. |
source |
| Xerox | Xerox AltaLink and EC81xx products | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Vulnerable | Vulnerable | CVE assessment: XRX26-016 v4 confirms both CVEs affect this product. Xerox is testing a fix with a target publication date of 2026-11-06; no released fixed version is identified. Monitor XRX26-016 for availability. Affected PHP component; the bulletin does not publish exact PHP or product build numbers. |
source |
| Xerox | Xerox App Gallery | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Xerox App Gallery & Device Apps in the vendor bulletin. |
source |
| Xerox | Xerox Auto Update (AU) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Auto-Redaction | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Xerox App Gallery & Device Apps in the vendor bulletin. |
source |
| Xerox | Xerox B1022, B1025 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox B105, B110, B115 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox B205, B210, B215 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox B225, B230, B235, B305, B310, B315, B410 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Baltoro | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox C230, C235, C240, C245, C255a, C300, C303a, C305ae, C320, C325, C410 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Central Publisher (PPR) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Personalized Print (PPR) in the vendor bulletin. |
source |
| Xerox | Xerox CFM Fleet Agent | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox CFM Local Agent | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox CFM Printer Enrollment Tool | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Cloud Analytics | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Cloud Fleet Management | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Cloud Fleet Management (CFM) Portal | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Cloud Identity/CIAM | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Cloud Platform (Azure) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Cloud Print Management | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Command Centre | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Connect for Box | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Connectors in the vendor bulletin. |
source |
| Xerox | Xerox Connect for DropBox | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Connectors in the vendor bulletin. |
source |
| Xerox | Xerox Connect for Exchange Online | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Connectors in the vendor bulletin. |
source |
| Xerox | Xerox Connect for Google Drive | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Connectors in the vendor bulletin. |
source |
| Xerox | Xerox Connect for Microsoft 365 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Connectors in the vendor bulletin. |
source |
| Xerox | Xerox Connect for Microsoft OneDrive | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Connectors in the vendor bulletin. |
source |
| Xerox | Xerox D95, D110, D125, D136 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Device Agent (XDA Lite) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Device Agent Partner Edition (XDA PE) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Device Manager & CentreWare Web | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Doc Intel | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under DocuShare & Content Management in the vendor bulletin. |
source |
| Xerox | Xerox DocuShare | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under DocuShare & Content Management in the vendor bulletin. |
source |
| Xerox | Xerox DocuShare Flex | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under DocuShare & Content Management in the vendor bulletin. |
source |
| Xerox | Xerox DocuShare Go | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under DocuShare & Content Management in the vendor bulletin. |
source |
| Xerox | Xerox Easy Assist (iOS & Android) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Mobile in the vendor bulletin. |
source |
| Xerox | Xerox Empress Studio | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox Enhanced LPR Filter (XELF) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Host Printing Software in the vendor bulletin. |
source |
| Xerox | Xerox Export Agent | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Fleet Management Portal | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Fleet Management Portal for FedRAMP | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FedRAMP Offerings in the vendor bulletin. |
source |
| Xerox | Xerox FreeFlow 9 (Makeready, Express to Print, and Print Manager App) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox FreeFlow Core | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox FreeFlow Makeready Software | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox FreeFlow Print Server (FFPS) - Solaris and Windows platforms | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox FreeFlow VI Suite | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox FreeFlow Vision Connect | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FreeFlow in the vendor bulletin. |
source |
| Xerox | Xerox iGen | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox IJP900 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox In-Aisle Publisher (PPR) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Personalized Print (PPR) in the vendor bulletin. |
source |
| Xerox | Xerox In-Store Publisher (PPR) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Personalized Print (PPR) in the vendor bulletin. |
source |
| Xerox | Xerox Integration Server | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Integration Server for FedRAMP | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FedRAMP Offerings in the vendor bulletin. |
source |
| Xerox | Xerox Intelligent Document Processing (IDP) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Intelligent Filer | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Iridesse Press | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox License Manager | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Managed Print Services Application Program Interface V2 (MPS API V2) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox mstore | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under DocuShare & Content Management in the vendor bulletin. |
source |
| Xerox | Xerox Note Converter | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Nuvera | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Phaser 3020 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Phaser 3052, 3260 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Phaser 3330 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Phaser product family (unresolved scope) | Outside the current releases of 3020, 3052, 3260 and 3330 evaluated in v4; no resolved family-wide version scope | Investigation | Investigation | CVE assessment: XRX26-016 v2 places the Phaser family under assessment. V4 confirms only the evaluated current releases of 3020, 3052, 3260 and 3330 as not impacted and says review of remaining products continues. The unresolved model/version scope is retained as Investigation; it is not a confirmed vulnerability finding. Family-level assessment remains unresolved outside the model/release scopes explicitly cleared in the newer bulletin. |
source 1 source 2 |
| Xerox | Xerox Platform Administrator (PPR) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Personalized Print (PPR) in the vendor bulletin. |
source |
| Xerox | Xerox PrimeLink B91xx | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox PrimeLink C90xx | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox PrimeLink C92xx | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox PrimeLink product family (unresolved scope) | Outside the current releases of B91xx, C90xx and C92xx evaluated in v4; no resolved family-wide version scope | Investigation | Investigation | CVE assessment: XRX26-016 v2 places the PrimeLink family under assessment. V4 confirms only the evaluated current releases of B91xx, C90xx and C92xx as not impacted and says review of remaining products continues. The unresolved model/version scope is retained as Investigation; it is not a confirmed vulnerability finding. Family-level assessment remains unresolved outside the model/release scopes explicitly cleared in the newer bulletin. |
source 1 source 2 |
| Xerox | Xerox Print and Scan Experience | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Drivers in the vendor bulletin. |
source |
| Xerox | Xerox Print Drivers | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Drivers in the vendor bulletin. |
source |
| Xerox | Xerox Print Service Plugin (Android) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Mobile in the vendor bulletin. |
source |
| Xerox | Xerox Printer Access Facility (XPAF) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Host Printing Software in the vendor bulletin. |
source |
| Xerox | Xerox Printer Security Assessment Tool | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Proficio PX300 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Proficio PX500 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Publishing Manager (PPR) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Personalized Print (PPR) in the vendor bulletin. |
source |
| Xerox | Xerox QuickLink | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Report Manager (XRM) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Report Manager for FedRAMP | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FedRAMP Offerings in the vendor bulletin. |
source |
| Xerox | Xerox Report Manager V2 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Rialto | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Scan to Cloud Email | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Scanning App for OnBase | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Services Manager (XSM) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Services Manager Contract Adapter | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Services Manager Data Warehouse | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Services Manager Data Warehouse for FedRAMP | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FedRAMP Offerings in the vendor bulletin. |
source |
| Xerox | Xerox Services Manager for FedRAMP | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FedRAMP Offerings in the vendor bulletin. |
source |
| Xerox | Xerox Services Portal (XSP) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Services Portal for FedRAMP | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under FedRAMP Offerings in the vendor bulletin. |
source |
| Xerox | Xerox Share Patient Information V2 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Summarizer | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Supplies Automation | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Supplies Tracker | Vendor-remediated app; release and remediation date not specified | Fix | Fix | CVE assessment: Xerox reports Supplies Tracker remediated by removing the vulnerable PHP component; customers need take no action. Vendor-remediated app; the bulletin does not publish a numbered fixed release. |
source 1 source 2 |
| Xerox | Xerox Support Assistant | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Xerox App Gallery & Device Apps in the vendor bulletin. |
source |
| Xerox | Xerox Template Designer (PPR) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Personalized Print (PPR) in the vendor bulletin. |
source |
| Xerox | Xerox Translate and Print | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Xerox App Gallery & Device Apps in the vendor bulletin. |
source |
| Xerox | Xerox Trivor | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox VersaLink B400, B405, B600, B605, B610, B615 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox VersaLink C/B415, C/B625, C/B620 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Vulnerable | Vulnerable | CVE assessment: XRX26-016 v4 confirms both CVEs affect this product. Xerox is testing a fix with a target publication date of 2026-11-06; no released fixed version is identified. Monitor XRX26-016 for availability. Affected PHP component; the bulletin does not publish exact PHP or product build numbers. |
source |
| Xerox | Xerox VersaLink C/B71xx, C/B70xx | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox VersaLink C400, C405, C500, C505, C600, C605 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox VersaLink C8000, C9000, C8000W | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Versant 280, 4100 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Web Packager (XWP) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox WorkCentre 3335, 3345 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox WorkCentre 3655, EC7836, EC7856 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Vulnerable | Vulnerable | CVE assessment: XRX26-016 v4 confirms both CVEs affect this product. A fix is in development; the bulletin provides no fixed version or release date. Monitor XRX26-016 for updates. Affected PHP component; the bulletin does not publish exact PHP or product build numbers. |
source |
| Xerox | Xerox WorkCentre 6515 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Xerox | Xerox Workflow Central | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Document Workflow & Productivity in the vendor bulletin. |
source |
| Xerox | Xerox Workplace App (iOS & Android) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Mobile in the vendor bulletin. |
source |
| Xerox | Xerox Workplace Cloud | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Management in the vendor bulletin. |
source |
| Xerox | Xerox Workplace Cloud (XWC) Mac Client | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Management in the vendor bulletin. |
source |
| Xerox | Xerox Workplace Cloud Fleet Management | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Cloud Platforms & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox Workplace Kiosk (SOT) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Xerox App Gallery & Device Apps in the vendor bulletin. |
source |
| Xerox | Xerox Workplace Suite | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Management in the vendor bulletin. |
source |
| Xerox | Xerox Worldwide Ticketing Tool | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Vulnerable | Vulnerable | CVE assessment: XRX26-016 v4 confirms both CVEs affect this product. A fix is in development; the bulletin provides no fixed version or release date. Monitor XRX26-016 for updates. Affected PHP component; the bulletin does not publish exact PHP or product build numbers. |
source |
| Xerox | Xerox XSM Data Parser | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Managed Print Services & Fleet Management in the vendor bulletin. |
source |
| Xerox | Xerox ZC364 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| XigmaNAS project | XigmaNAS bundled PHP components | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown XigmaNAS lists PHP and PHP-based administration tools among software used. |
source | |
| XMPie | XMPie Circle | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under XMPie in the vendor bulletin. |
source |
| XMPie | XMPie PersonalEffect (uProduce) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under XMPie in the vendor bulletin. |
source |
| XMPie | XMPie uStore | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under XMPie in the vendor bulletin. |
source |