venabo

Global cloud / infrastructure

Aliases / services: venabo / emvion Business Software GmbH / venabo GmbH / venabo.ZEIT / venabo.SERVICE
Official website: https://www.venabo.de/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status: Cloud patched; on-premises update required
Response information checked: 2026-10-27 Rechecked: 2026-10-27

Time-tracking and ITSM software from emvion Business Software GmbH, formerly venabo GmbH.

All cloud instances have received PHP fixes. Version 2026.5.2 is available for customer-operated servers and should be installed promptly.

What users should do

Update on-premises installations to 2026.5.2. If immediate updating is impossible, stop affected services until installation and verification. Cloud customers need no action.

Official service URL

https://www.venabo.de/

Source URLs

PHP2Shell response and scopehttps://www.venabo.de/php-sicherheitsluecke/Response evidence
Operating entityhttps://emvion.de/impressum/Service and operation documentation
Official service and authorhttps://emvion.de/willkommen/Service and operation documentation

Related official sources

PHP2Shell response and scopeOfficial notice
Operating entityOfficial information directory
Official service and authorOfficial information directory