PHP Vulnerability Responses by Company

edoc solutions gmbh

Global hosting
Aliases / services
edoc / edoc solutions gmbh / edoc.de
Official website
https://edoc.de/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

edoc365

Response status
Automatic update completed; normal access restored
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 23 October 13:30 update confirms all edoc365 systems updated and reopened, with temporary external access restrictions removed.

Scope: edoc365 systems updated by the provider; on-premises, legacy products and agent requirements are separate.

What users should do

Use normally; on-premises customers must follow their separate update instructions.

Official service URL

Source URLs

  1. edoc: PHP vulnerability responsehttps://docs.edoc.de/de/edoc-knowledge-base/v1/aktuelle-informationen-zu-php-schwachstellen-cve-2026-109618-und-cve-2026-109619Response evidence
  2. https://docs.edoc.de/de/edoc-knowledge-base/v1/https://docs.edoc.de/de/edoc-knowledge-base/v1/Service and operation documentation

edoc on-premises products (Monthly and Quarterly)

Response status
Fixes released; customers must verify installation
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Monthly 2026/09.1 and Quarterly-Hotfix 2026/Q3.1 are available. Automatic installation depends on configuration; other environments require manual updating.

Scope: On-premises contracts; release availability does not establish deployment at every customer.

What users should do

Install and verify the update for your channel. Restrict HTTPS/443 access until installation is complete.

Source URLs

  1. edoc: PHP vulnerability responsehttps://docs.edoc.de/de/edoc-knowledge-base/v1/aktuelle-informationen-zu-php-schwachstellen-cve-2026-109618-und-cve-2026-109619Response evidence
  2. https://docs.edoc.de/de/edoc-knowledge-base/v1/https://docs.edoc.de/de/edoc-knowledge-base/v1/Service and operation documentation

edoc document reader tester

Response status
Affected; no security updates
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The product is explicitly affected and end of life. No security update will be provided; removal is recommended.

Scope: Limited to this legacy product; supported-channel fixes must not be assumed to cover it.

What users should do

Identify installations and fully uninstall according to official guidance.

Source URLs

  1. edoc: PHP vulnerability responsehttps://docs.edoc.de/de/edoc-knowledge-base/v1/aktuelle-informationen-zu-php-schwachstellen-cve-2026-109618-und-cve-2026-109619Response evidence
  2. https://docs.edoc.de/de/edoc-knowledge-base/v1/https://docs.edoc.de/de/edoc-knowledge-base/v1/Service and operation documentation

edoc app server v2

Response status
Affected; no security updates
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The product is explicitly affected and end of life. No security update will be provided; removal is recommended.

Scope: Limited to this legacy product; supported-channel fixes must not be assumed to cover it.

What users should do

Identify installations and fully uninstall according to official guidance.

Source URLs

  1. edoc: PHP vulnerability responsehttps://docs.edoc.de/de/edoc-knowledge-base/v1/aktuelle-informationen-zu-php-schwachstellen-cve-2026-109618-und-cve-2026-109619Response evidence
  2. https://docs.edoc.de/de/edoc-knowledge-base/v1/https://docs.edoc.de/de/edoc-knowledge-base/v1/Service and operation documentation

edoc agent/platform PHP and phpMyAdmin synchronization

Response status
Verify OS updates and fixed phpMyAdmin synchronization
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

PHP on Ubuntu follows OS package updates. CLI-only PHP on the platform is unaffected, but the server must also be updated so synchronization retrieves fixed phpMyAdmin.

Scope: Distinguish CLI-only operation from web-facing phpMyAdmin; do not mark all agent components unconditionally unaffected.

What users should do

Verify OS security-update settings and installation, and ensure the next sync retrieves fixed phpMyAdmin.

Source URLs

  1. edoc: PHP vulnerability responsehttps://docs.edoc.de/de/edoc-knowledge-base/v1/aktuelle-informationen-zu-php-schwachstellen-cve-2026-109618-und-cve-2026-109619Response evidence
  2. https://docs.edoc.de/de/edoc-knowledge-base/v1/https://docs.edoc.de/de/edoc-knowledge-base/v1/Service and operation documentation

edoc system control

Response status
Fix and restoration reported
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October 11:20 update reports edoc system control fixed and back online.

Scope: The explicitly named edoc system control service; not completion across all on-premises products.

What users should do

Use normally and report remaining issues to support.

Source URLs

  1. edoc: PHP vulnerability responsehttps://docs.edoc.de/de/edoc-knowledge-base/v1/aktuelle-informationen-zu-php-schwachstellen-cve-2026-109618-und-cve-2026-109619Response evidence
  2. https://docs.edoc.de/de/edoc-knowledge-base/v1/https://docs.edoc.de/de/edoc-knowledge-base/v1/Service and operation documentation
Related official sources
  1. edoc: PHP vulnerability responseOfficial notice
  2. edoc: operator informationOfficial information directory

Comments