PHP Vulnerability Responses by Company

SOURCENEXT CORPORATION

Companies / web services
Aliases / services
ソースネクスト / SOURCENEXT / SOURCENEXT CORPORATION / ソースネクスト株式会社 / ソースネクスト株式会社（SOURCENEXT）
Official website
https://www.sourcenext.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

SOURCENEXT member site

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Disclosed possible leakage of 22,519,960 member records. The FAQ reports affected passwords invalidated and the exploited vulnerability fixed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Reset your password through the official site, change reused passwords elsewhere and consult the FAQ for suspended online features.

Official service URL

Source URLs

  1. Member-data disclosure, October 15https://www.sourcenext.com/support/i/2026/1015_info/Service and operation documentation
  2. Official member-data incident FAQhttps://www.sourcenext.com/support/i/2026/1015_1/Service and operation documentation

SOURCENEXT email distribution

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The October 27 notice reports possible disclosure of email data in Cuenote FC; counts and details remain under investigation. It explicitly separates this from the member-site incident.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Do not open suspicious links or attachments or enter personal data. The notice says this mailing dataset excludes passwords and card data.

Official service URL

Source URLs

  1. Possible email-data disclosure, October 27https://download.www.sourcenext.com/support/i/2026/1027_info/Service and operation documentation
Related official sources
  1. Company profileOfficial information directoryOfficial evidence identifying the operating company.
  2. Member-data disclosure, October 15Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
  3. Official member-data incident FAQOfficial notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
  4. Possible email-data disclosure, October 27Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.

Comments