PHP Vulnerability Responses by Company

SpinetiX

Global hosting
Aliases / services
SpinetiX / SpinetiX SA / spinetix.com / DSOS / Elementi
Official website
https://www.spinetix.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Digital-signage players running DSOS

Response status
DSOS 5.0.0 released; customer update required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

DSOS 4.0.0–4.10.0 is affected. Version 5.0.0, released on 22 October at 17:15 UTC, contains fixes backported into its PHP version reported as 8.1.34.

Scope: DSOS includes PHP used by Control Center, RPC and DiVA CMS. Release of a fix does not mean every device has installed it.

What users should do

Update DSOS to fixed version 5.0.0 or later. Restrict Internet access until updated and use trusted networks where possible.

Official service URL

Source URLs

  1. SpinetiX: PHP vulnerability responsehttps://support.spinetix.com/wiki/PHP2Shell_vulnerabilitiesResponse evidence
  2. https://support.spinetix.com/wiki/DSOS_release_noteshttps://support.spinetix.com/wiki/DSOS_release_notesService and operation documentation

Elementi

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official product-specific notice says this software/infrastructure does not use or include PHP and is unaffected.

Scope: Only the named software/infrastructure; distinct from DSOS and company websites.

What users should do

No PHP update is required for this offering. Update DSOS devices separately if you use them alongside it.

Source URLs

  1. SpinetiX: PHP vulnerability responsehttps://support.spinetix.com/wiki/PHP2Shell_vulnerabilitiesResponse evidence
  2. https://support.spinetix.com/wiki/DSOS_release_noteshttps://support.spinetix.com/wiki/DSOS_release_notesService and operation documentation

SpinetiX cloud infrastructure

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official product-specific notice says this software/infrastructure does not use or include PHP and is unaffected.

Scope: Only the named software/infrastructure; distinct from DSOS and company websites.

What users should do

No PHP update is required for this offering. Update DSOS devices separately if you use them alongside it.

Source URLs

  1. SpinetiX: PHP vulnerability responsehttps://support.spinetix.com/wiki/PHP2Shell_vulnerabilitiesResponse evidence
  2. https://support.spinetix.com/wiki/DSOS_release_noteshttps://support.spinetix.com/wiki/DSOS_release_notesService and operation documentation

SpinetiX websites using PHP

Response status
Hosting PHP patches confirmed applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official notice says some company websites used PHP, but hosting provider Infomaniak confirmed PHP remediation completed on 22 October at 05:42 UTC.

Scope: Hosting status for SpinetiX websites only. Infomaniak is not merged as the same legal entity.

What users should do

Use the websites normally. Customer DSOS devices still require separate updates.

Source URLs

  1. SpinetiX: PHP vulnerability responsehttps://support.spinetix.com/wiki/PHP2Shell_vulnerabilitiesResponse evidence
  2. https://support.spinetix.com/wiki/DSOS_release_noteshttps://support.spinetix.com/wiki/DSOS_release_notesService and operation documentation
Related official sources
  1. SpinetiX: PHP vulnerability responseOfficial notice
  2. SpinetiX: operating-company informationOfficial information directory

Comments