PHP Vulnerability Responses by Company

GMO Pepabo, Inc.

Japan-based services
Aliases / services
ロリポップ！ / ロリポップ / Lolipop / デプロイナウ / Deploy Now / GMO Pepabo / GMOペパボ株式会社 / GMO Pepabo, Inc. / ロリポップ！マネージドクラウド / ヘテムル / heteml / heteml（ヘテムル） / heteml.jp / ムームードメイン / MuuMuu Domain / MuuMuu Domain（ムームードメイン） / muumuu-domain.com / おさいぽ
Official website
https://pepabo.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Lolipop web hosting

Response status
PHP patched; some functions suspended
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

PHP 5.3–8.5 has fixes, and upload progress is disabled. After the October 22 restoration, applications, WordPress migration and WebDAV were suspended as a precaution.

Scope: Existing sites, email and account login remain available according to the later notice. Check its updates for resumption.

What users should do

Check uploads and other site functions; migrate older PHP to a supported branch.

Official service URL

Source URLs

  1. Lolipop: Maintenance completion and remediationhttps://lolipop.jp/info/news/8239/Response evidence
  2. https://lolipop.jp/info/news/8246/https://lolipop.jp/info/news/8246/Service and operation documentation

ロリポップ！マネージドクラウド

Response status
PHP patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Fixes and site restoration completed October 22 at 06:10 JST. PHP 8.2–8.4 was upgraded; 7.2, 7.3, 7.4 and 8.1 received patches. session.upload_progress was disabled.

Scope: Managed Cloud only; separate from standard Lolipop hosting.

What users should do

Test websites, forms and uploads; consider PHP 8.2+ and update WordPress core, plugins and themes.

Official service URL

Source URLs

  1. https://support.mc.lolipop.jp/hc/ja/articles/360052748913-メンテナンス-障害情報-はどこで確認できますかhttps://support.mc.lolipop.jp/hc/ja/articles/360052748913-メンテナンス-障害情報-はどこで確認できますかService and operation documentation
  2. https://maintenance.mc.lolipop.jp/post/831164936720924672/%E5%BE%A9%E6%97%A7php%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%B8%E3%81%AE%E5%AF%BE%E5%BF%9C%E3%81%AB%E4%BC%B4%E3%81%86%E3%83%A1%E3%83%B3%E3%83%86%E3%83%8A%E3%83%B3%E3%82%B9%E5%AE%8C%E4%BA%86%E3%81%A8%E7%B5%8C%E7%B7%AF%E3%81%AE%E3%81%94%E5%A0%B1%E5%91%8Ahttps://maintenance.mc.lolipop.jp/post/831164936720924672/%E5%BE%A9%E6%97%A7php%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%B8%E3%81%AE%E5%AF%BE%E5%BF%9C%E3%81%AB%E4%BC%B4%E3%81%86%E3%83%A1%E3%83%B3%E3%83%86%E3%83%8A%E3%83%B3%E3%82%B9%E5%AE%8C%E4%BA%86%E3%81%A8%E7%B5%8C%E7%B7%AF%E3%81%AE%E3%81%94%E5%A0%B1%E5%91%8AResponse evidence

ヘテムル

Response status
PHP patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Fixes and website restoration completed October 22 at 11:24 JST. PHP 5.6–8.5 received branch-specific fixes and session.upload_progress was disabled.

Scope: Only the Heteml PHP environment explicitly covered by the notice; do not extend to other services or MAX without evidence.

What users should do

Test forms and uploads; consider PHP 8.2+ and WordPress-related updates.

Official service URL

Source URLs

  1. https://heteml.jp/info/detail/id/2954/https://heteml.jp/info/detail/id/2954/Response evidence

ムームードメイン

Response status
Fixes and maintenance completed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Patching and maintenance completed October 22 at 15:36 JST, including control panels, API/MCP and Osaipo auto-renewal. Muumuu Server and WP Hosting websites also reopened.

Scope: Distinguish domain management from hosting. Only Muumuu Server is explicitly identified as using the Heteml environment.

What users should do

Muumuu Server users should follow the linked Heteml PHP and form guidance.

Official service URL

Source URLs

  1. https://muumuu-domain.com/information/news/5942https://muumuu-domain.com/information/news/5942Response evidence

おさいぽ

Response status
Maintenance completed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Preventive PHP-related maintenance ended October 22 at 15:15 JST, covering the website, control panel, point payments and auto-charging.

Scope: PHP versions and patch details are not published; maintenance completion is not proof of every PHP environment being patched.

What users should do

Contact support for transaction or payment issues. The notice specifies no additional customer action.

Official service URL

Source URLs

  1. https://osaipo.jp/info/mainte/id/680/https://osaipo.jp/info/mainte/id/680/Response evidence
  2. https://osaipo.jp/info/maintehttps://osaipo.jp/info/mainteService and operation documentation
Related official sources
  1. Lolipop: Maintenance completion and remediationOfficial notice
  2. Lolipop: All maintenance completedOfficial noticeNotice updated: 2026-10-22T16:57:00+09:00

Comments