PHP Vulnerability Responses by Company

TransIP

Global hosting
Aliases / services
TransIP / transip.eu
Official website
https://www.transip.eu/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

TransIP Webhosting

Response status
PHP patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

TransIP reports both CVE fixes applied to PHP 7.4–8.5 across all Webhosting packages.

Scope: Self-managed PHP on VPS, Kubernetes and OpenStack is outside this completion statement.

What users should do

No customer update or PHP branch change is required for these two CVEs; check site operation.

Official service URL

Source URLs

  1. https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619Response evidence
  2. TransIP: PHP configuration and managementhttps://transip.eu/knowledgebase/5987-changing-the-version-your-website/Service and operation documentation
  3. https://www.transip.nl/nieuws/https://www.transip.nl/nieuws/Service and operation documentation

TransIP VPS

Response status
User update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official notice calls for prompt updates where customers manage PHP in this environment.

Scope: Separate from automatic Webhosting patch completion.

What users should do

Update your PHP runtime and verify the running processes and application.

Source URLs

  1. https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619Response evidence

TransIP Kubernetes

Response status
User update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official notice calls for prompt updates where customers manage PHP in this environment.

Scope: Separate from automatic Webhosting patch completion.

What users should do

Update your PHP runtime and verify the running processes and application.

Source URLs

  1. https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619Response evidence

TransIP OpenStack

Response status
User update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official notice calls for prompt updates where customers manage PHP in this environment.

Scope: Separate from automatic Webhosting patch completion.

What users should do

Update your PHP runtime and verify the running processes and application.

Source URLs

  1. https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619https://www.transip.nl/knowledgebase/kritieke-php-kwetsbaarheden-cve-2026-109618-en-cve-2026-109619Response evidence
Related official sources
  1. TransIP: PHP configuration and managementOfficial information directoryPHP operations documentation; incident patch deployment unconfirmed.

Comments