PHP Vulnerability Responses by Company

CMS IT-Consulting GmbH

Global hosting
Aliases / services
CMS IT-Consulting / CMS IT-Consulting GmbH / cms-it.de
Official website
https://www.cms-it.de/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

CMS-managed Linux management systems

Response status
Updates through maintenance
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 26 notice schedules distribution fixes through regular maintenance, without confirming completion everywhere.

Scope: Managed systems such as Netdisco/phpIPAM; not all vendor products or ClearPass.

What users should do

Confirm deployment and maintenance windows with CMS.

Official service URL

Source URLs

  1. CMS IT-Consulting: PHP vulnerability responsehttps://www.cms-it.de/en/news/php2shell-statusResponse evidence
  2. https://www.cms-it.de/newshttps://www.cms-it.de/newsService and operation documentation

Aruba ClearPass managed by CMS

Response status
Restricted access; awaiting vendor update
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

CMS describes managed installations as externally inaccessible and additionally protected, pending a vendor update.

Scope: Limited to CMS-managed installations; not a blanket ClearPass unaffected claim.

What users should do

Confirm the installation-specific update plan with CMS.

Source URLs

  1. CMS IT-Consulting: PHP vulnerability responsehttps://www.cms-it.de/en/news/php2shell-statusResponse evidence
  2. https://www.cms-it.de/newshttps://www.cms-it.de/newsService and operation documentation
Related official sources
  1. CMS IT-Consulting: PHP vulnerability responseOfficial notice
  2. CMS IT-Consulting: Operating company informationOfficial information directory

Comments