Microsoft Defender Vulnerability Management Admins cannot see certain CVE affected products for PHP2SHELL CVEs.
- Status
- Eingeschränkt
- Funktion
- Threat and Vulnerability Management
- Region
- Nicht angegeben (alle Regionen)
- Beginn
- 21.10.2026, 23:00 Uhr
- Dauer
- 2 Std. 55 Min.
- Letztes Update
- 22.10.2026, 01:22 Uhr
- Nächstes Update
- 21.10.2026, 04:00 Uhr
Aktueller Stand
We're completing our final validations within our internal environment, and we remain on track to remediate the issue by Thursday, October 22, 2026, at 1:00 AM UTC.
Mehr Informationen
The API listed below is not working when directly called and not displaying affected products as expected in the UI.
/api/vulnerabilities/{vulnerabilityId}/affectedProducts/
Betroffen
Admins attempting to view affected products within the UI or using the affected API are impacted.
Ursache
A limitation on the values returned by the API leads to the affected API not returning any results.
Verlauf
Alle Updates von Microsoft zu dieser Meldung, das neuste zuoberst.
- 22.10.2026, 01:22 Uhr
We're completing our final validations within our internal environment, and we remain on track to remediate the issue by Thursday, October 22, 2026, at 1:00 AM UTC.
- 22.10.2026, 00:18 Uhr
We've determined that limitations on the values returned by the affected API resulted in this impact. We've developed a solution which we are rolling out to our internal environment, after which we will test to validate it fully remediates the issue before rolling out throughout the impacted environment. We expect we will be able to complete the validation and further rollout to resolve impact by Thursday, October 22, 2026, at 1:00 AM UTC.