Kufer Software GmbH
- Aliases / services
- Kufer / Kufer Software GmbH / kufer.de / KuferWEB / KuferSQL
- Official website
- https://www.kufer.de/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Kufer-hosted KuferWEB and websites
- Response status
- Patches applied
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Hosting partners installed PHP fixes, including older branches; Kufer checked servers and uploads were re-enabled.
Scope: Limited to Kufer hosting; self-hosted and other-host deployments differ.
What users should do
No extra action for Kufer hosting unless individually contacted.
Official service URL
Source URLs
- Kufer: PHP vulnerability responsehttps://www.kufer.de/artikel/php-sicherheitsluecke-php2shell-so-sichern-wir-ihre-webseite-abResponse evidence
KuferSQL
- Response status
- Not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The notice states KuferSQL, all additional modules and interfaces are unaffected.
Scope: KuferSQL only, separate from PHP-dependent KuferWEB.
What users should do
No action for this scope.
Source URLs
- Kufer: PHP vulnerability responsehttps://www.kufer.de/artikel/php-sicherheitsluecke-php2shell-so-sichern-wir-ihre-webseite-abResponse evidence
Self-hosted or externally hosted KuferWEB
- Response status
- Customer verification required
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
PHP fixes are the responsibility of the customer's IT team or other hosting provider.
Scope: The notice does not confirm completion for individual external deployments.
What users should do
Confirm patched PHP packages, including distribution backports, with your provider.
Source URLs
- Kufer: PHP vulnerability responsehttps://www.kufer.de/artikel/php-sicherheitsluecke-php2shell-so-sichern-wir-ihre-webseite-abResponse evidence
Related official sources
- Kufer: PHP vulnerability responseOfficial notice
- Kufer: Operating company informationOfficial information directory
Comments