PHP Vulnerability Responses by Company

creoline GmbH

Global hosting
Aliases / services
Creoline / creoline.com / creoline GmbH
Official website
https://www.creoline.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Managed Server / Cloud

Response status
Managed PHP 8.2–8.5 patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice updated October 22 at 09:20 CEST confirms Managed PHP 8.2–8.5 installed, while 8.1 and older have no available fix in its matrix.

Scope: Only the stated Managed versions are covered. Unmanaged servers require customer updates; hiding PHP headers does not replace patching.

What users should do

Check managed-support coverage in the server overview. Upgrade compatible legacy applications; patch unmanaged systems yourself.

Official service URL

Source URLs

  1. https://help.creoline.com/en/doc/php2shell-cve-2026-109618-cve-2026-109619-NRSlM3gJrWhttps://help.creoline.com/en/doc/php2shell-cve-2026-109618-cve-2026-109619-NRSlM3gJrWResponse evidence
Related official sources
  1. Creoline: PHP security responseOfficial notice

Comments