PHP Vulnerability Responses by Company

Kombo

Global cloud / infrastructure
Aliases / services
Kombo / Kombo Technologies LLC / Kombo Technologies GmbH
Official website
https://www.kombo.dev/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Sync incident resolved as providers returned
Response information checked
2026-10-27 Rechecked: 2026-10-27

Unified APIs for HR, recruiting and learning systems.

Some syncs failed while connected providers stopped services for PHP remediation. Kombo marked the issue resolved on October 24 as providers returned. Kombo itself does not use PHP and was not directly affected.

What users should do

Check normal syncing. Kombo's guidance says it automatically retries and backfills missed data.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://status.kombo.dev/incidents/01M5FXDD278ATNRBGHR6S47S9ZResponse evidence
  2. Operating entityhttps://www.kombo.dev/legal/data-processing-agreement-2026-04-01.pdfService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments