PHP Vulnerability Responses by Company

Baota (Guangdong Baota Security Technology)

Global cloud / infrastructure
Aliases / services
广东堡塔安全技术有限公司 / 宝塔面板 / 堡塔 / 宝塔Linux面板 / 宝塔Windows面板 / BT Panel / Linux服务器管理助手 / Windows服务器管理助手 / Baota (Guangdong Baota Security Technology)
Official website
https://www.bt.cn/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Linux fixes available; mitigation for older Windows PHP
Response information checked
2026-10-27 Rechecked: 2026-10-27

Server control panels managing PHP environments

Baota provides patched Linux PHP 7/8 packages in its software store. Windows PHP 8.2 and later have fixes; older Windows versions receive mitigation such as session.upload_progress.enabled=0. Linux PHP 5.4–5.6 builds are for testing, not confirmed production fixes.

What users should do

Back up, refresh the software catalogue, update each PHP runtime and restart. Check all installed versions, extensions, login and uploads; migrate older runtimes to supported branches.

Official service URL

Source URLs

  1. PHP vulnerability responsehttps://docs.bt.cn/notices/php-nodejs-security-update-2026-10-21Response evidence
  2. Operator and related informationhttps://www.bt.cn/new/agreement_open.htmlService and operation documentation
  3. Operator and related informationhttps://www.bt.cn/others/about/Service and operation documentation
Related official sources
  1. PHP vulnerability responseOfficial notice
  2. Operator and related informationOfficial information directory
  3. Operator and related informationOfficial information directory

Comments