PHP Vulnerability Responses by Company

TPiCS Laboratory, Inc.

Japan-based services
Aliases / services
株式会社ティーピクス研究所 / TPiCS Laboratory / TPiCS-X / TPiCS / TPiCS Laboratory, Inc.
Official website
https://www.tpics.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Program download server

Response status
Updated to PHP 8.3.36
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Production management software

October 22 reports removal of unused PHP files and upgrade from 8.0.30 to 8.3.36, with no access/intrusion traces found.

Scope: Licensing server, WebAPI and public site are separate scopes.

What users should do

Contact TPiCS support if access behaves abnormally.

Official service URL

Source URLs

  1. PHP2Shell assessment and remediationhttps://www.tpics.co.jp/2026/10/22/php%E8%84%86%E5%BC%B1%E6%80%A7-%E9%80%9A%E7%A7%B0php2shell-%E3%81%AB%E9%96%A2%E3%81%97%E3%81%A6%E8%AA%BF%E6%95%B4-%E5%AF%BE%E7%AD%96/Response evidence
  2. https://www.tpics.co.jp/https://www.tpics.co.jp/Service and operation documentation

Remote licensing server

Response status
PHP system removed
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

On 22 October the provider reported removing unused PHP files and the PHP system itself, with no intrusion traces found.

Scope: This removal is distinct from the download server’s PHP update.

What users should do

Contact TPiCS support if licensing fails.

Source URLs

  1. PHP2Shell assessment and remediationhttps://www.tpics.co.jp/2026/10/22/php%E8%84%86%E5%BC%B1%E6%80%A7-%E9%80%9A%E7%A7%B0php2shell-%E3%81%AB%E9%96%A2%E3%81%97%E3%81%A6%E8%AA%BF%E6%95%B4-%E5%AF%BE%E7%AD%96/Response evidence

TPiCS-X 5.0–5.2 WebAPI

Response status
Built on .NET; no PHP
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

TxWebAPI52.exe, Tx51.exe and Tx50.exe use .NET / ASP.NET Core rather than affected PHP. Versions 4.0/4.1 have no WebAPI feature.

Scope: Only the TPiCS-X product API; assess download and licensing infrastructure separately.

What users should do

No PHP remediation is required for this WebAPI.

Source URLs

  1. PHP2Shell assessment and remediationhttps://www.tpics.co.jp/2026/10/22/php%E8%84%86%E5%BC%B1%E6%80%A7-%E9%80%9A%E7%A7%B0php2shell-%E3%81%AB%E9%96%A2%E3%81%97%E3%81%A6%E8%AA%BF%E6%95%B4-%E5%AF%BE%E7%AD%96/Response evidence

Corporate website on Jimdo

Response status
PHP embedding unavailable; reported unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October notice says the corporate site uses Jimdo SaaS and Cloudflare, does not permit PHP embedding, and is unaffected.

Scope: This is the company’s site assessment, not a fleet-wide statement for Jimdo or Cloudflare.

What users should do

Browse normally.

Source URLs

  1. PHP2Shell assessment and remediationhttps://www.tpics.co.jp/2026/10/22/php%E8%84%86%E5%BC%B1%E6%80%A7-%E9%80%9A%E7%A7%B0php2shell-%E3%81%AB%E9%96%A2%E3%81%97%E3%81%A6%E8%AA%BF%E6%95%B4-%E5%AF%BE%E7%AD%96/Response evidence
Related official sources
  1. PHP2Shell assessment and remediationOfficial notice
  2. Company and operator informationOfficial information directory

Comments