PHP Vulnerability Responses by Company

EC-CUBE

Japan-based services
Aliases / services
EC-CUBE / イーシーキューブ / ec-cube.co
Official website
https://www.ec-cube.net/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

EC-CUBE / ec-cube.co

Response status
Self-managed PHP update; cloud guidance in console
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Self-managed EC-CUBE requires PHP runtime updates and restarts. ec-cube.co says necessary work is underway and status is provided in its console.

Scope: Updating EC-CUBE or plugins does not patch PHP. The public notice does not confirm completion across ec-cube.co.

What users should do

Have administrators patch/restart PHP and test checkout, payments and plugins. Follow console notices for ec-cube.co.

Official service URL

Source URLs

  1. EC-CUBE: PHP security releasehttps://www.ec-cube.net/news/detail.php?news_id=492Response evidence
  2. https://www.ec-cube.net/newsrelease/?backnumber_url=202610https://www.ec-cube.net/newsrelease/?backnumber_url=202610Service and operation documentation
Related official sources
  1. EC-CUBE: PHP security releaseOfficial information directory

Comments