PHP Vulnerability Responses by Company

KAGOYA JAPAN

Japan-based services
Aliases / services
カゴヤ・ジャパン / KAGOYA / カゴヤ / KAGOYA JAPAN
Official website
https://www.kagoya.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Web hosting plans

Response status
Fixed versions available; older versions mitigated
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The latest notice lists PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 as fixed versions, distinguishing mitigation for 7.4, 8.0 and 8.1.

Scope: Rental Server plans only. Mitigation for older PHP is not a complete fix.

What users should do

Check the control-panel version and move to a fixed PHP 8.2-or-newer release.

Official service URL

Source URLs

  1. https://www.kagoya.jp/news/2026102637175/https://www.kagoya.jp/news/2026102637175/Response evidence
  2. KAGOYA: PHP response update, October 23https://www.kagoya.jp/news/2026102337094/Response evidence

Managed dedicated / shared / WordPress-specific plans

Response status
Vulnerability remains; migration recommended
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The latest notice explicitly says vulnerabilities remain in shared, managed-dedicated and WordPress-dedicated plans while future handling is under consideration.

Scope: An operating service or reopened control panel does not mean its hosted PHP has been patched.

What users should do

Consider migrating to a Rental Server plan with fixed PHP. Until remediation, consider suspending publication or restricting access.

Official service URL

Source URLs

  1. https://www.kagoya.jp/news/2026102637175/https://www.kagoya.jp/news/2026102637175/Response evidence
  2. KAGOYA: PHP response update, October 23https://www.kagoya.jp/news/2026102337094/Response evidence

KAGOYA CLOUD VPS

Response status
Customer PHP update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customer-managed PHP; the control panel reopened October 23 at 18:00 JST.

Scope: Panel restoration does not patch guest PHP.

What users should do

Check installed PHP and apply vendor fixes.

Source URLs

  1. https://www.kagoya.jp/news/2026102637175/https://www.kagoya.jp/news/2026102637175/Response evidence

KAGOYA FLEX

Response status
Customer PHP update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customer-managed OS/middleware; the panel reopened October 26 at 14:00 JST.

Scope: Restrictions are temporary mitigation.

What users should do

Patch PHP; consider temporary suspension or access restrictions.

Source URLs

  1. https://www.kagoya.jp/news/2026102637175/https://www.kagoya.jp/news/2026102637175/Response evidence
Related official sources
  1. KAGOYA: PHP response update, October 23Official noticeNotice updated: 2026-10-23T12:30:00+09:00

Comments