PHP Vulnerability Responses by Company

Domainfactory GmbH

Global hosting
Aliases / services
DomainFactory / df.eu / Domainfactory GmbH
Official website
https://www.df.eu/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Webhosting / Managed Hosting / Reseller (managed PHP)

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

October22 updates confirm all offered PHP versions, including Legacy PHP, patched on the covered managed and webhosting services.

Scope: Includes the named Managed Cloud Server and Reseller Server scopes; excludes customer-maintained VPS runtimes.

What users should do

No customer patching is required for these managed services. Update self-managed VPS PHP separately.

Official service URL

Source URLs

  1. DomainFactory: PHP security responsehttps://www.df.eu/de/support/df-faq/aktuelles/php-sicherheitsluecke-cve-2026-109618-und-cve-2026-109619/Response evidence
  2. https://status.df.eu/incidents/5y7h4dbb20hvhttps://status.df.eu/incidents/5y7h4dbb20hvService and operation documentation

Managed WordPress

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

October21 update confirms completion.

Scope: Distinct named product scope.

What users should do

No customer patching required.

Source URLs

  1. DomainFactory: PHP security responsehttps://www.df.eu/de/support/df-faq/aktuelles/php-sicherheitsluecke-cve-2026-109618-und-cve-2026-109619/Response evidence

VPS (self-managed PHP)

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customers must update their PHP.

Scope: Separate from managed hosting completion.

What users should do

Install fixed packages; check EasyApache4 packages for cPanel/WHM.

Source URLs

  1. DomainFactory: PHP security responsehttps://www.df.eu/de/support/df-faq/aktuelles/php-sicherheitsluecke-cve-2026-109618-und-cve-2026-109619/Response evidence
Related official sources
  1. DomainFactory: PHP security responseOfficial notice

Comments