PHP Vulnerability Responses by Company

exigo ag

Global hosting
Aliases / services
Exigo / exigo.ch / exigo ag
Official website
https://www.exigo.ch/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Webhosting / Shared Webserver

Response status
Patched except ws14; migration required there
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The26October update confirms patching completed by23October except ws14. Affected ws14 customers are contacted individually; shutdown is planned for31October.

Scope: Do not classify ws14 as patched. The26October statement supersedes the older cached WS60-and-later scope.

What users should do

Check the server number; ws14 customers should follow migration instructions. Discuss legacy PHP/Debian upgrades and application compatibility.

Official service URL

Source URLs

  1. Exigo: PHP vulnerability responsehttps://www.exigo.ch/exigo-ag-mitteilungen/sicherheitsupdate-php2shell-cve-2026-109618-und-cve-2026-109619Response evidence

exigo-webmail

Response status
Webmail interface changed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The webmail interface was replaced as part of PHP2Shell security measures. Existing login credentials remain valid.

Scope: This documents a webmail measure without confirming a specific permanent PHP patch. Keep it separate from shared web server patch status.

What users should do

Verify login and mail operations in the new interface and contact Exigo if needed.

Source URLs

  1. Exigo: PHP vulnerability responsehttps://www.exigo.ch/exigo-ag-mitteilungen/sicherheitsupdate-php2shell-cve-2026-109618-und-cve-2026-109619Response evidence
Related official sources
  1. Exigo: PHP vulnerability responseOfficial notice

Comments