PHP Vulnerability Responses by Company

Alfasado

Japan-based services
Aliases / services
アルファサード / Alfasado / PowerCMS / PowerCMSクラウド / DynamicMTML
Official website
https://www.alfasado.net/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PowerCMS / PowerCMS Cloud

Response status
Cloud response completed and restored; self-managed PHP needs updates
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

PowerCMS Cloud completed the necessary response and resumed. Self-managed PHP features such as dynamic publishing, DynamicMTML, membership and code compression require runtime updates.

Scope: Cloud restoration is not proof that self-managed deployments are patched; unspecified deployed builds are not inferred.

What users should do

Identify PHP use and update with the administrator; cloud customers should check individual notices and operation.

Official service URL

Source URLs

  1. Alfasado: PHP response and cloud restoration 1https://www.powercms.jp/news/cve-2026-109618-cve-2026-109619-powercms.htmlResponse evidence
  2. Alfasado: PHP response and cloud restoration 2https://www.powercms.jp/news/php_cve-2026-109618cve-2026-109619.htmlService and operation documentation
  3. https://alfasado.net/news/202610231830.htmlhttps://alfasado.net/news/202610231830.htmlService and operation documentation

PowerCMS X (self-managed)

Response status
PHP runtime update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The product notice directs users to update PHP for CVE-2026-109618 and CVE-2026-109619.

Scope: This is distinct from PowerCMS. Cloud or product-site restoration does not prove customer installations patched.

What users should do

Coordinate with the administrator and apply fixed PHP after backup and compatibility checks.

Source URLs

  1. https://powercmsx.jp/news/php_cve-2026-109618_cve-2026-109619.htmlhttps://powercmsx.jp/news/php_cve-2026-109618_cve-2026-109619.htmlResponse evidence
  2. https://powercmsx.jp/news/https://powercmsx.jp/news/Service and operation documentation
  3. https://alfasado.net/news/202610212214.htmlhttps://alfasado.net/news/202610212214.htmlService and operation documentation

PowerCMS X Cloud

Response status
Necessary response completed; service resumed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October22 20:20 final report states that PowerCMS X Cloud completed necessary work and testing and resumed service.

Scope: This supersedes the 11:00 maintenance statement. The deployed PHP build is not specified.

What users should do

Check operation and customer notices; ask support about problems or coverage.

Source URLs

  1. https://powercmsx.jp/news/php_cve-2026-109618_cve-2026-109619.htmlhttps://powercmsx.jp/news/php_cve-2026-109618_cve-2026-109619.htmlService and operation documentation
  2. https://alfasado.net/news/202610222020.htmlhttps://alfasado.net/news/202610222020.htmlResponse evidence
  3. https://alfasado.net/news/202610231830.htmlhttps://alfasado.net/news/202610231830.htmlService and operation documentation

Tsutaeru Web

Response status
PHP patched; service resumed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The individual notice confirms maintenance completion, an upgrade to a fixed PHP version and service restoration.

Scope: This applies to the Tsutaeru Web system, not the entire PHP environment of embedding websites.

What users should do

Check translation, ruby and read-aloud buttons, admin access and API operation; report problems to support.

Source URLs

  1. https://tsutaeru.cloud/news/maintenance20261021.htmlhttps://tsutaeru.cloud/news/maintenance20261021.htmlResponse evidence
  2. https://alfasado.net/news/202610212214.htmlhttps://alfasado.net/news/202610212214.htmlService and operation documentation
  3. https://tsutaeru.cloud/https://tsutaeru.cloud/Service and operation documentation
Related official sources
  1. Alfasado: PHP response and cloud restoration 1Official information directory
  2. Alfasado: PHP response and cloud restoration 2Official information directory

Comments