PHP Vulnerability Responses by Company

Hexard

Japanese companies / services
Aliases / services
ヘキサード / 株式会社ヘキサード / Hexard / 伝助 / 伝助EOS / 送助 / 請助 / Web shop変換丸 / 社保助
Official website
https://www.hexard.co.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Defacement recovery and PHP measures completed
Response information checked
2026-10-27 Rechecked: 2026-10-27

Hexard develops business software packages. This notice concerns its own website.

On 23 October it disclosed website defacement displaying a fake Cloudflare check from early on 22 October until about 11:00. It reopened after file repairs, measures for both PHP CVEs, WordPress-related updates and administrator password changes. It reports no confirmed information leakage, without establishing PHP as the entry point.

What users should do

Visitors who executed commands or other instructions from the fake screen should check their device security. The company says merely seeing the screen without following its instructions generally requires no special action.

Official service URL

Source URLs

  1. Official PHP response and scopehttps://www.hexard.co.jp/news/6169/Response evidence
  2. Operating entityhttps://www.hexard.co.jp/company/Service and operation documentation
Related official sources
  1. Official PHP response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments