PHP Vulnerability Responses by Company

PlusServer

Global hosting
Aliases / services
PlusServer / plusserver.com / plusserver GmbH
Official website
https://www.plusserver.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Full Management / Operations Management with patchup

Response status
Most updated; individual cases ongoing
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Nearly all current OS installations were updated on October22. Individual work and tickets continue; the October27 notice does not declare overall completion.

Scope: Only PHP versions with available fixes are covered. Additional plusstorage work and self-managed contracts are separate.

What users should do

Verify contract coverage and your case's completion; follow the recommendation to scan systems.

Official service URL

Source URLs

  1. https://status.plusserver.com/incidents/gfhm6w4qkh4ghttps://status.plusserver.com/incidents/gfhm6w4qkh4gResponse evidence

Self Service / Operations Management without patchup

Response status
Customer PHP update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Customers under self-service or Operations Management without patchup are instructed to install security updates themselves.

Scope: Managed-fleet progress does not establish self-managed completion; old PHP may lack fixes.

What users should do

Install available fixes, verify running PHP and ask support if unsure.

Source URLs

  1. https://status.plusserver.com/incidents/gfhm6w4qkh4ghttps://status.plusserver.com/incidents/gfhm6w4qkh4gResponse evidence

plusstorage

Response status
Storage OS updates ongoing
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Additional storage OS updates began October26. The October27 12:57 CET update expects work to continue until at least06:00 the following morning.

Scope: The provider says affected storage is not externally accessible. A forecast is not completion confirmation.

What users should do

Check redundancy and operation for possible CIFS disconnects, brief NFS interruptions and iSCSI/Fibre Channel path losses.

Source URLs

  1. https://status.plusserver.com/incidents/gfhm6w4qkh4ghttps://status.plusserver.com/incidents/gfhm6w4qkh4gResponse evidence
Related official sources
  1. PlusServer: PHP vulnerability responseOfficial notice
  2. PlusServer: operating-company informationOfficial information directory

Comments