PHP Vulnerability Responses by Company

Fluxpunkt

Global hosting
Aliases / services
Fluxpunkt / Fluxpunkt GmbH / fluxpunkt.de / Starfleet Controller
Official website
https://www.fluxpunkt.de/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Fluxpunkt Plesk web hosting

Response status
All supplied PHP versions patched
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October notice says all PHP versions on hosting servers were patched and sites using older PHP were moved to a corrected version. Customer PHP sites were temporarily disabled until the update.

Scope: Fluxpunkt-managed hosting only. The provider says rollback to an unpatched PHP version is unavailable.

What users should do

Check pages, forms, shops, login and uploads. Resolve compatibility issues by updating CMS/plugins/custom code and contact support if needed.

Official service URL

Source URLs

  1. Fluxpunkt: PHP vulnerability responsehttps://www.fluxpunkt.de/blog/fluxpunkt-blog-1/php2shell-kritische-sicherheitslucken-in-php-26Response evidence
  2. https://www.fluxpunkt.de/blog/fluxpunkt-blog-1https://www.fluxpunkt.de/blog/fluxpunkt-blog-1Service and operation documentation

Fluxpunkt-developed STARFACE modules

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official notice explicitly identifies this Fluxpunkt-developed offering as Java-based and unaffected.

Scope: Fluxpunkt's own offering only. Third-party STARFACE core, firewalls and WLAN products are not merged into this provider.

What users should do

No update is required for these CVEs; continue routine update management.

Source URLs

  1. Fluxpunkt: PHP vulnerability responsehttps://www.fluxpunkt.de/blog/fluxpunkt-blog-1/php2shell-kritische-sicherheitslucken-in-php-26Response evidence
  2. https://www.fluxpunkt.de/blog/fluxpunkt-blog-1https://www.fluxpunkt.de/blog/fluxpunkt-blog-1Service and operation documentation

StarfleetController

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official notice explicitly identifies this Fluxpunkt-developed offering as Java-based and unaffected.

Scope: Fluxpunkt's own offering only. Third-party STARFACE core, firewalls and WLAN products are not merged into this provider.

What users should do

No update is required for these CVEs; continue routine update management.

Source URLs

  1. Fluxpunkt: PHP vulnerability responsehttps://www.fluxpunkt.de/blog/fluxpunkt-blog-1/php2shell-kritische-sicherheitslucken-in-php-26Response evidence
  2. https://www.fluxpunkt.de/blog/fluxpunkt-blog-1https://www.fluxpunkt.de/blog/fluxpunkt-blog-1Service and operation documentation

Fluxpunkt corporate website and shop

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official notice explicitly lists the corporate website/shop as Python-based and unaffected.

Scope: Fluxpunkt's own offering only. Third-party STARFACE core, firewalls and WLAN products are not merged into this provider.

What users should do

No update is required for these CVEs; continue routine update management.

Source URLs

  1. Fluxpunkt: PHP vulnerability responsehttps://www.fluxpunkt.de/blog/fluxpunkt-blog-1/php2shell-kritische-sicherheitslucken-in-php-26Response evidence
  2. https://www.fluxpunkt.de/blog/fluxpunkt-blog-1https://www.fluxpunkt.de/blog/fluxpunkt-blog-1Service and operation documentation
Related official sources
  1. Fluxpunkt: PHP vulnerability responseOfficial notice

Comments