PHP Vulnerability Responses by Company

Ashisuto

Japan-based services
Aliases / services
株式会社アシスト / Ashisuto / AWSC-2
Official website
https://www.ashisuto.co.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Distributed-product support guidance through AWSC-2

Response status
Impact and investigation vary by product
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Enterprise software distribution and technical support.

The October26 table marks Citrix, iDoperation, PostgreSQL, Tenable, Zabbix and Hibun as affected. Separate official Ericom documentation distinguishes unaffected, investigating and action-required products and versions.

Scope: This is distributor/support guidance, not a determination for every product of each manufacturer. Gated remediation details were not accessed. The AWSC-2 portal, FAQ and AI Search have separate findings.

What users should do

Use the valid support ID in AWSC-2 to read instructions for the exact product, version and configuration.

Official service URL

Source URLs

  1. PHP impact and product-specific responseshttps://www.ashisuto.co.jp/support/information/php.htmlResponse evidence
  2. https://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlhttps://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlResponse evidence

AWSC-2 support portal

Response status
Monitoring; no evidence of exploitation impact
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice relays Salesforce's statement that it is monitoring the vulnerabilities and has no evidence of exploitation affecting Salesforce services or customer data.

Scope: No evidence of exploitation impact does not mean no PHP use, no vulnerability or completed remediation.

What users should do

Follow portal updates and use a valid support ID for product-specific instructions.

Source URLs

  1. PHP impact and product-specific responseshttps://www.ashisuto.co.jp/support/information/php.htmlResponse evidence

Support FAQ

Response status
No PHP use; not affected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October26 official table states that this support function does not use PHP and is unaffected.

Scope: This does not determine the status of AWSC-2 itself or distributed products.

What users should do

Use the function and contact support if problems occur.

Source URLs

  1. PHP impact and product-specific responseshttps://www.ashisuto.co.jp/support/information/php.htmlResponse evidence

Ericom Connect (Ashisuto distribution/support)

Response status
9.x and11.x unaffected;8.x and earlier under review
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October26 product-specific document states that9.x and11.x are unaffected and8.x and earlier remain under investigation.

Scope: Ashisuto guidance for software developed by Ericsson (formerly Ericom). Do not infer the status of unlisted versions.

What users should do

Check the deployed version and consult Ashisuto support for8.x or earlier, or any unlisted version.

Source URLs

  1. https://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlhttps://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlResponse evidence

AccessNow (Ashisuto distribution/support)

Response status
9.x and11.x unaffected;8.x and earlier under review
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October26 product-specific document states that9.x and11.x are unaffected and8.x and earlier remain under investigation.

Scope: Ashisuto guidance for software developed by Ericsson (formerly Ericom). Do not infer the status of unlisted versions.

What users should do

Check the deployed version and consult Ashisuto support for8.x or earlier, or any unlisted version.

Source URLs

  1. https://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlhttps://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlResponse evidence

Ericom Shield on-premises (Ashisuto support)

Response status
Speed tester affected; temporary and persistent measures
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The speed tester in versions20.05,20.07,20.10,21.01,21.04,21.11,22.08,23.05 and23.13 is affected. Guidance removes the component and prevents it from starting again.

Scope: The vendor says normal web-isolation functions are not affected by stopping this component. This is customer remediation, not proof that all deployments are already patched.

What users should do

Have an administrator follow both temporary and persistent official measures; temporary removal alone is reversed by a Shield restart.

Source URLs

  1. https://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlhttps://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlResponse evidence

Ericom Shield Cloud (Ashisuto support)

Response status
Not affected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October26 Ericom product advisory explicitly states that Shield Cloud is not affected.

Scope: Separate from the affected on-premises speed tester. No inference is made that Cloud does not use PHP.

What users should do

Confirm that the deployed service is Shield Cloud and consult support if necessary.

Source URLs

  1. https://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlhttps://ericom-tec.ashisuto.co.jp/docs/information/20261026-3e2b2ba7.htmlResponse evidence
Related official sources
  1. PHP impact and product-specific responsesOfficial notice

Comments