PHP Vulnerability Responses by Company

GMO Flatt Security Inc.

Japan-based services
Aliases / services
GMO Flatt Security / Flatt Security / フラットセキュリティ / Shisho / GMO Flatt Security株式会社 / GMO Flatt Security Inc. / Shisho Cloud / Takumi / KENRO
Official website
https://flatt.tech/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PHP security assessment

Response status
Technical guidance published
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Publishes PHP2Shell analysis and guidance prioritizing PHP patches.

Scope: The article does not establish client assessment completion or other GMO services' patch status.

What users should do

Identify PHP environments and update to fixed releases.

Official service URL

Source URLs

  1. GMO Flatt Security: php2shell analysishttps://blog.flatt.tech/entry/php2shellResponse evidence

Shisho Cloud

Response status
Not listed
Response information checked
2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Official product information, notices and targeted searches did not establish a PHP2Shell response for this service.

Scope: Distinguish PHP research and diagnostic guidance from the product's own response.

What users should do

Ask support about scope and remediation for both CVEs. Administrators should check patched releases for self-managed PHP.

Source URLs

  1. https://flatt.tech/https://flatt.tech/Service and operation documentation
  2. https://flatt.tech/newshttps://flatt.tech/newsService and operation documentation
  3. GMO Flatt Security: php2shell analysishttps://blog.flatt.tech/entry/php2shellService and operation documentation

Takumi

Response status
Not listed
Response information checked
2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Official product information, notices and targeted searches did not establish a PHP2Shell response for this service.

Scope: Distinguish PHP research and diagnostic guidance from the product's own response.

What users should do

Ask support about scope and remediation for both CVEs. Administrators should check patched releases for self-managed PHP.

Source URLs

  1. https://flatt.tech/https://flatt.tech/Service and operation documentation
  2. https://flatt.tech/newshttps://flatt.tech/newsService and operation documentation
  3. GMO Flatt Security: php2shell analysishttps://blog.flatt.tech/entry/php2shellService and operation documentation
  4. https://flatt.tech/takumihttps://flatt.tech/takumiService and operation documentation

KENRO

Response status
Not listed
Response information checked
2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Official product information, notices and targeted searches did not establish a PHP2Shell response for this service.

Scope: Distinguish PHP research and diagnostic guidance from the product's own response.

What users should do

Ask support about scope and remediation for both CVEs. Administrators should check patched releases for self-managed PHP.

Source URLs

  1. https://flatt.tech/https://flatt.tech/Service and operation documentation
  2. https://flatt.tech/newshttps://flatt.tech/newsService and operation documentation
  3. GMO Flatt Security: php2shell analysishttps://blog.flatt.tech/entry/php2shellService and operation documentation
  4. https://flatt.tech/kenrohttps://flatt.tech/kenroService and operation documentation
Related official sources
  1. GMO Flatt Security: php2shell analysisOfficial information directory

Comments