PHP Vulnerability Responses by Company

クラウドサーカス株式会社

Japan-based services
Aliases / services
クラウドサーカス株式会社 / Cloud CIRCUS / スターティアラボ / Mtame / BowNow / BlueMonkey
Official website
https://cloudcircus.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ActiBook

Response status
Patched; all restrictions lifted
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Digital marketing SaaS

The October22 22:32 update reports completed patching and safety checks, with all suspended functions restored.

Scope: ActiBook only; not a completion statement for other Cloud CIRCUS products.

What users should do

No customer action is required; contact support for problems.

Official service URL

Source URLs

  1. https://manual.actibookone.com/hc/ja/articles/63488113860761https://manual.actibookone.com/hc/ja/articles/63488113860761Response evidence
  2. Staged response to PHP vulnerabilitieshttps://manual.cloudcircus.jp/news/news_261021.htmlResponse evidence
  3. Company and operator informationhttps://cloudcircus.jp/company/info/Service and operation documentation
  4. https://manual.cloudcircus.jp/plan.htmlhttps://manual.cloudcircus.jp/plan.htmlService and operation documentation
  5. https://manual.cloudcircus.jp/news.htmlhttps://manual.cloudcircus.jp/news.htmlService and operation documentation

CMS BlueMonkey

Response status
Patched and reopened; some custom environments pending
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

October26 updates report lifted restrictions and reopened sites. Some custom environments still require patch work and receive individual updates.

Scope: Not completion for every environment; the October26 16:50 exception applies.

What users should do

No configuration changes are requested; affected custom-environment users should read their individual emails.

Source URLs

  1. https://faq.bluemonkey.jp/hc/ja/articles/63492908175897https://faq.bluemonkey.jp/hc/ja/articles/63492908175897Response evidence
  2. Staged response to PHP vulnerabilitieshttps://manual.cloudcircus.jp/news/news_261021.htmlResponse evidence
  3. Company and operator informationhttps://cloudcircus.jp/company/info/Service and operation documentation
  4. https://manual.cloudcircus.jp/plan.htmlhttps://manual.cloudcircus.jp/plan.htmlService and operation documentation
  5. https://manual.cloudcircus.jp/news.htmlhttps://manual.cloudcircus.jp/news.htmlService and operation documentation

Fullstar

Response status
Some functions suspended; production patch pending
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Selected admin functions are suspended while staging issues are addressed. Production patching/reopening targets around October28; completion is not announced in the reviewed notice.

Scope: Other functions remain available; reaching the target date is not completion.

What users should do

No customer work is required; check the official page for confirmed reopening.

Source URLs

  1. https://manual.fullstar10.com/info/news_20261022.htmlhttps://manual.fullstar10.com/info/news_20261022.htmlResponse evidence
  2. Staged response to PHP vulnerabilitieshttps://manual.cloudcircus.jp/news/news_261021.htmlResponse evidence
  3. Company and operator informationhttps://cloudcircus.jp/company/info/Service and operation documentation
  4. https://manual.cloudcircus.jp/plan.htmlhttps://manual.cloudcircus.jp/plan.htmlService and operation documentation
  5. https://manual.cloudcircus.jp/news.htmlhttps://manual.cloudcircus.jp/news.htmlService and operation documentation

LESSAR

Response status
Creation/editing restricted; reopening target around November15
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Selected AR creation/editing remains restricted while production patching is tested. The November15 reopening target is provisional.

Scope: Existing content remains available, but end-user Paint AR uploads are restricted. Do not apply this to COCOAR.

What users should do

Ask sales about assisted registration, supplying content and the desired publication date.

Source URLs

  1. https://ar-faq.cloudcircus.jp/hc/ja/articles/63488987750297https://ar-faq.cloudcircus.jp/hc/ja/articles/63488987750297Response evidence
  2. Staged response to PHP vulnerabilitieshttps://manual.cloudcircus.jp/news/news_261021.htmlResponse evidence
  3. Company and operator informationhttps://cloudcircus.jp/company/info/Service and operation documentation
  4. https://manual.cloudcircus.jp/plan.htmlhttps://manual.cloudcircus.jp/plan.htmlService and operation documentation
  5. https://manual.cloudcircus.jp/news.htmlhttps://manual.cloudcircus.jp/news.htmlService and operation documentation

Plusdb

Response status
Uploads redesigned; access restrictions lifted
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Affected upload processing was moved to a serverless design; admin access restrictions were fully lifted October27 at13:00.

Scope: Targeted processing changes only. Full platform renewal is planned through successor CIRCUS DB in2027.

What users should do

Check login, data creation/editing and public display; report problems to support.

Source URLs

  1. https://manual.plus-db.jp/news/news2610/https://manual.plus-db.jp/news/news2610/Response evidence
  2. Staged response to PHP vulnerabilitieshttps://manual.cloudcircus.jp/news/news_261021.htmlResponse evidence
  3. Company and operator informationhttps://cloudcircus.jp/company/info/Service and operation documentation
  4. https://manual.cloudcircus.jp/plan.htmlhttps://manual.cloudcircus.jp/plan.htmlService and operation documentation
  5. https://manual.cloudcircus.jp/news.htmlhttps://manual.cloudcircus.jp/news.htmlService and operation documentation
Related official sources
  1. Staged response to PHP vulnerabilitiesOfficial notice
  2. Company and operator informationOfficial information directory

Comments