PHP Vulnerability Responses by Company

SalesAgility

Global cloud / infrastructure
Aliases / services
SuiteCRM / スイートCRM / セールスアジリティ / SalesAgility
Official website
https://suitecrm.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

SuiteCRM (self-hosted)

Response status
PHP update and follow-up setting advised
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides a PHP-based CRM.

The official notice requires patched PHP and disabling session.upload_progress.enabled following the October 23 advisory.

Scope: Updating SuiteCRM alone is insufficient; hosted-service completion is separate.

What users should do

Back up, verify compatibility, patch PHP, and apply the additional setting.

Official service URL

Source URLs

  1. https://suitecrm.com/critical-php-security-release/https://suitecrm.com/critical-php-security-release/Response evidence

SuiteCRM Hosted

Response status
Patched (official statement)
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Official hosting has applied PHP fixes and addressed the October23 follow-up.

Scope: Only hosting operated by SalesAgility.

What users should do

No customer action required.

Source URLs

  1. https://suitecrm.com/critical-php-security-release/https://suitecrm.com/critical-php-security-release/Response evidence
Related official sources
  1. Preparing a SuiteCRM upgradeOfficial information directory

Comments