PHP Vulnerability Responses by Company

Kufer Software GmbH

Global hosting
Aliases / services
Kufer / Kufer Software GmbH / kufer.de / KuferWEB / KuferSQL
Official website
https://www.kufer.de/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Kufer-hosted KuferWEB and websites

Response status
Patches applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Hosting partners installed PHP fixes, including older branches; Kufer checked servers and uploads were re-enabled.

Scope: Limited to Kufer hosting; self-hosted and other-host deployments differ.

What users should do

No extra action for Kufer hosting unless individually contacted.

Official service URL

Source URLs

  1. Kufer: PHP vulnerability responsehttps://www.kufer.de/artikel/php-sicherheitsluecke-php2shell-so-sichern-wir-ihre-webseite-abResponse evidence

KuferSQL

Response status
Not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The notice states KuferSQL, all additional modules and interfaces are unaffected.

Scope: KuferSQL only, separate from PHP-dependent KuferWEB.

What users should do

No action for this scope.

Source URLs

  1. Kufer: PHP vulnerability responsehttps://www.kufer.de/artikel/php-sicherheitsluecke-php2shell-so-sichern-wir-ihre-webseite-abResponse evidence

Self-hosted or externally hosted KuferWEB

Response status
Customer verification required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

PHP fixes are the responsibility of the customer's IT team or other hosting provider.

Scope: The notice does not confirm completion for individual external deployments.

What users should do

Confirm patched PHP packages, including distribution backports, with your provider.

Source URLs

  1. Kufer: PHP vulnerability responsehttps://www.kufer.de/artikel/php-sicherheitsluecke-php2shell-so-sichern-wir-ihre-webseite-abResponse evidence
Related official sources
  1. Kufer: PHP vulnerability responseOfficial notice; link to this PHP incident unconfirmed
  2. Kufer: Operating company informationOfficial information directory

Comments