CM Informatik AG
- Aliases / services
- CMI / CM Informatik AG / cmi.ch / CM Informatik / CMI Holding AG / LehrerOffice / Scolaris / iCampus / Klapp / ProScola
- Official website
- https://cmi.ch/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
CMI platform and modules
- Response status
- No PHP; not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The 22 October notice says the .NET-based CMI platform and modules do not use PHP, including cloud, hybrid and on-premises deployments operated internally or by third parties.
Scope: The notice also names iCampus, Klapp and ProScola as unaffected; verify the applicable product and provider.
What users should do
No CMI platform update is required for these vulnerabilities.
Official service URL
Source URLs
- CMI: PHP vulnerability responsehttps://cmi.ch/news/php-sicherheitsluecke-cmi-nicht-betroffen/Response evidence
CMI LehrerOffice
- Response status
- No PHP; not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The 22 October notice explicitly says this product does not use PHP and is unaffected.
Scope: Limited to this named education product, not other products or customer PHP environments.
What users should do
The notice requires no CMI update for these vulnerabilities.
Source URLs
- CMI: PHP vulnerability responsehttps://cmi.ch/news/php-sicherheitsluecke-cmi-nicht-betroffen/Response evidence
CMI Scolaris
- Response status
- No PHP; not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The 22 October notice explicitly says this product does not use PHP and is unaffected.
Scope: Limited to this named education product, not other products or customer PHP environments.
What users should do
The notice requires no CMI update for these vulnerabilities.
Source URLs
- CMI: PHP vulnerability responsehttps://cmi.ch/news/php-sicherheitsluecke-cmi-nicht-betroffen/Response evidence
CMI corporate website (cmi.ch)
- Response status
- Fixed PHP applied
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The 22 October notice confirms cmi.ch has been updated to a corrected PHP version.
Scope: The website is technically separate from CMI solutions; this does not mean CMI products use PHP.
What users should do
Use the website normally.
Source URLs
- CMI: PHP vulnerability responsehttps://cmi.ch/news/php-sicherheitsluecke-cmi-nicht-betroffen/Response evidence
Related official sources
- CMI: PHP vulnerability responseOfficial notice
- CMI: Operator informationOfficial information directory
Comments