PHP Vulnerability Responses by Company

Serverprofis

Global hosting
Aliases / services
Serverprofis / serverprofis.de / Serverprofis GmbH
Official website
https://www.serverprofis.de/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Web hosting (EA-PHP / Alt-PHP)

Response status
Patched; configuration restriction retained
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Fixes were verified on October 22 and temporary upload filters removed.

Scope: The October 23 update retains this setting for separate CVE-2026-115560.

What users should do

Keep session.upload_progress.enabled disabled; check CMS updates and unexpected changes.

Official service URL

Source URLs

  1. Serverprofis: PHP vulnerability responsehttps://www.serverprofis.de/php2shell-kritische-php-sicherheitsluecke/Response evidence
Related official sources
  1. Serverprofis: PHP vulnerability responseOfficial notice
  2. Serverprofis: operating-company informationOfficial information directory

Comments