PHP Vulnerability Responses by Company

NTT DOCOMO BUSINESS, Inc.

Japan-based services
Aliases / services
NTTコミュニケーションズ / NTT Communications / Bizメール＆ウェブ / Smart Data Platform / NTT DOCOMO BUSINESS / NTTドコモビジネス株式会社 / NTT DOCOMO BUSINESS, Inc.
Official website
https://www.ntt.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Biz Mail & Web Business r3 (Web/PHP)

Response status
PHP updated; Web service resumed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice confirms Web restoration on October 22 at 20:23 and a required switch to current PHP 8.3, without rollback.

Scope: The notice withholds security details and does not name these CVEs; do not claim confirmed remediation of specific CVEs.

What users should do

Check application compatibility with PHP 8.3 and contact contracted support if necessary.

Official service URL

Source URLs

  1. Biz Mail & Web: web service restoredhttps://support.ntt.com/mw-businessr3/information/detail/pid2500002hgi/Response evidence
  2. https://support.ntt.com/mw-businessr3/information/detail/pid2500002hgj/https://support.ntt.com/mw-businessr3/information/detail/pid2500002hgj/Service and operation documentation
  3. https://support.ntt.com/mw-businessr3/information/search/https://support.ntt.com/mw-businessr3/information/search/Service and operation documentation

Arcstar Smart PBX

Response status
Reported unaffected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The provider confirms neither CVE affects Smart PBX.

What users should do

No incident-specific customer action.

Source URLs

  1. https://support.ntt.com/smart-pbx/information/detail/pid2500002hhx/https://support.ntt.com/smart-pbx/information/detail/pid2500002hhx/Response evidence

MagicConnect

Response status
Reported unaffected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Relay, management, viewer and client components do not use PHP.

Scope: This notice covers the NTT DOCOMO BUSINESS offering.

What users should do

Continue normal use.

Source URLs

  1. https://support.ntt.com/bdp/information/detail/pid2500002hh6/https://support.ntt.com/bdp/information/detail/pid2500002hh6/Response evidence

VxGPlatform / XNS (formerly NSS/PSS) / WAN Wonderful

Response status
Core products unaffected; peripheral review ongoing
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Core Fortinet products are excluded; peripheral systems remain under investigation.

What users should do

Monitor provider guidance or contact support.

Source URLs

  1. https://support.ntt.com/vxgplatform/maintenance/detail/98099/https://support.ntt.com/vxgplatform/maintenance/detail/98099/Response evidence

SDPF Cloud/Server — instances, bare metal, vSphere/Nutanix/Hyper-V, IaaS powered by VMware

Response status
Customer patching for installed PHP
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Applies where customers installed PHP.

What users should do

Update through vendor procedures; check RHEL repository guidance.

Source URLs

  1. https://sdpf.ntt.com/news/2026102301/https://sdpf.ntt.com/news/2026102301/Response evidence

SDPF Load Balancer (NetScaler VPX)

Response status
Restrict management access
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affects SNIP GUI/API management-enabled resources.

What users should do

Restrict or disable management access per official guidance.

Source URLs

  1. https://sdpf.ntt.com/news/2026102301/https://sdpf.ntt.com/news/2026102301/Response evidence

SDPF Firewall (vSRX)

Response status
Restrict enabled management features
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Applies when J-Web, JSC or fwAuth is enabled.

What users should do

Disable affected features or restrict trusted access.

Source URLs

  1. https://sdpf.ntt.com/news/2026102301/https://sdpf.ntt.com/news/2026102301/Response evidence

docomo business RINK IDaaS

Response status
Service unaffected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

No PHP in the service; the OEM blog is a separate environment.

What users should do

Use normally; distinguish the separate blog remediation.

Source URLs

  1. https://sdpf.ntt.com/news/2026102302/https://sdpf.ntt.com/news/2026102302/Response evidence
Related official sources
  1. Biz Mail & Web: web service restoredOfficial information directory

Comments