Matomo
- Aliases / services
- マトモ / Piwik / ピウィック / InnoCraft / Matomo
- Official website
- https://matomo.org/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Matomo On-Premise
- Response status
- PHP update required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Provides web analytics software.
The official notice requires immediate PHP updates; updating Matomo alone is insufficient.
Scope: Separate from Matomo Cloud's protected status.
What users should do
Apply vendor PHP security updates and verify the web server uses the patched runtime.
Official service URL
Source URLs
- https://matomo.org/blog/2026/10/critical-php-security-vulnerabilities-important-update-for-matomo-users/https://matomo.org/blog/2026/10/critical-php-security-vulnerabilities-important-update-for-matomo-users/Response evidence
Matomo Cloud
- Response status
- Protected (official statement)
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Matomo states that its Cloud infrastructure is protected.
Scope: The notice does not specify the protection mechanism.
What users should do
No customer action required.
Source URLs
- https://matomo.org/blog/2026/10/critical-php-security-vulnerabilities-important-update-for-matomo-users/https://matomo.org/blog/2026/10/critical-php-security-vulnerabilities-important-update-for-matomo-users/Response evidence
Related official sources
- Matomo security checklistOfficial information directory
Comments