PHP Vulnerability Responses by Company

株式会社ネットスプリング

Japan-based services
Aliases / services
株式会社ネットスプリング / NetSpring / AXIOLE / eFEREC
Official website
https://www.netspring.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

AXIOLE

Response status
Fixed 1.25.2 available; upgrade required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

AXIOLE authentication servers and eFEREC

Versions through 1.25.0 are potentially affected. Fixed 1.25.2 is provided for hardware, virtual and AWS/Azure deployments.

Scope: AXIOLE only. eFEREC is separately assessed; this does not cover products such as SmartSignOn.

What users should do

Upgrade using the instructions for your deployment; restrict external access to administration, user and IdP interfaces meanwhile.

Official service URL

Source URLs

  1. PHP vulnerability responsehttps://www.netspring.co.jp/support_php2shell_announce.htmlResponse evidence
  2. Company and operator informationhttps://www.netspring.co.jp/about.htmlService and operation documentation

eFEREC

Response status
Not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

NetSpring states eFEREC is not affected by these PHP vulnerabilities.

Scope: Only eFEREC as named in the notice; do not apply this assessment to AXIOLE or SmartSignOn.

What users should do

No eFEREC update is prescribed for these vulnerabilities.

Source URLs

  1. PHP vulnerability responsehttps://www.netspring.co.jp/support_php2shell_announce.htmlResponse evidence
  2. Company and operator informationhttps://www.netspring.co.jp/about.htmlService and operation documentation
Related official sources
  1. PHP vulnerability responseOfficial notice
  2. Company and operator informationOfficial information directory

Comments