PHP Vulnerability Responses by Company

enerSpace GmbH

Global hosting
Aliases / services
Enerspace / enerSpace GmbH / enerspace.de / enerCall / enerStage
Official website
https://enerspace.de/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

enerSpace PHP 8.2–8.5 hosting

Response status
Patched
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 27 update confirms PHP 8.2–8.5 were patched across operated servers by 17:50 on October 21. Recommended configuration for the session issue disclosed on October 23 was also applied.

Scope: Applies to PHP 8.2–8.5; PHP 7.3 and older remain an unpatched exception.

What users should do

Use normally; check the separate legacy-version entries if an older PHP is selected.

Official service URL

Source URLs

  1. Enerspace: PHP vulnerability responsehttps://www.enerspace.de/php2shell-php-sicherheitsluecke/Response evidence
  2. https://www.enerspace.de/blog/https://www.enerspace.de/blog/Service and operation documentation
  3. Enerspace: Operator informationhttps://www.enerspace.de/impressum/Service and operation documentation

enerSpace PHP 7.4, 8.0 and 8.1 hosting

Response status
Backports applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

enerSpace states Plesk backports were applied on the evening of October 21, distinguishing these end-of-upstream-support versions as patched for this incident.

Scope: Only PHP 7.4, 8.0 and 8.1; PHP 7.3 and older remain a separate unpatched scope.

What users should do

Plan migration to PHP 8.3 or newer after compatibility checks.

Source URLs

  1. Enerspace: PHP vulnerability responsehttps://www.enerspace.de/php2shell-php-sicherheitsluecke/Response evidence
  2. https://www.enerspace.de/blog/https://www.enerspace.de/blog/Service and operation documentation
  3. Enerspace: Operator informationhttps://www.enerspace.de/impressum/Service and operation documentation

enerSpace environments using PHP 7.3 or older

Response status
No fix; PHP migration required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The notice current on October 27 explicitly states PHP 7.3 and older have no fix and remain vulnerable.

Scope: Exception for PHP 7.3 and older; do not confuse it with newer PHP or patched 7.4–8.1 backports.

What users should do

Identify affected sites and migrate to fixed PHP after compatibility checks.

Source URLs

  1. Enerspace: PHP vulnerability responsehttps://www.enerspace.de/php2shell-php-sicherheitsluecke/Response evidence
  2. https://www.enerspace.de/blog/https://www.enerspace.de/blog/Service and operation documentation
  3. Enerspace: Operator informationhttps://www.enerspace.de/impressum/Service and operation documentation

PHP used by enerSpace Plesk control panels

Response status
Patched
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

enerSpace states Plesk's own control-panel PHP was also patched overnight into October 22, separately from website PHP.

Scope: enerSpace-operated Plesk panels; selected website PHP versions require separate checking.

What users should do

Use the control panel normally.

Source URLs

  1. Enerspace: PHP vulnerability responsehttps://www.enerspace.de/php2shell-php-sicherheitsluecke/Response evidence
  2. https://www.enerspace.de/blog/https://www.enerspace.de/blog/Service and operation documentation
  3. Enerspace: Operator informationhttps://www.enerspace.de/impressum/Service and operation documentation
Related official sources
  1. Enerspace: PHP vulnerability responseOfficial notice
  2. Enerspace: Operator informationOfficial information directory

Comments