PICTURE GmbH
- Aliases / services
- PICTURE / PICTURE GmbH / picture-gmbh.de / PICTURE-Prozessplattform / Kasaia
- Official website
- https://www.picture-gmbh.de/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
PICTURE-Prozessplattform
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The 22 October notice says its Java platform is unaffected, including provider-hosted and on-premises deployments.
Scope: Kasaia is a separate scope; corporate website patching is not product patching.
What users should do
No action is required for these vulnerabilities.
Official service URL
Source URLs
- PICTURE: PHP vulnerability responsehttps://www.picture-gmbh.de/php2shell-picture-prozessplattform-und-kasaia-nicht-betroffen/Response evidence
- https://www.picture-gmbh.de/news/https://www.picture-gmbh.de/news/Service and operation documentation
- https://www.picture-gmbh.de/impressum/https://www.picture-gmbh.de/impressum/Service and operation documentation
Kasaia
- Response status
- No PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The 22 October notice identifies Java-based Kasaia as unaffected.
Scope: Product assessment; separate from corporate website patching.
What users should do
No additional action required.
Source URLs
- PICTURE: PHP vulnerability responsehttps://www.picture-gmbh.de/php2shell-picture-prozessplattform-und-kasaia-nicht-betroffen/Response evidence
- https://www.picture-gmbh.de/news/https://www.picture-gmbh.de/news/Service and operation documentation
- https://www.picture-gmbh.de/impressum/https://www.picture-gmbh.de/impressum/Service and operation documentation
Related official sources
- PICTURE: PHP vulnerability responseOfficial notice
Comments