Infotopics AfT B.V.
- Aliases / services
- Trulyp / Infotopics AfT B.V. / trulyp.com / Infotopics Apps for Tableau / WriteBackExtreme / MailScheduler / Trulyp Analytics
- Official website
- https://www.trulyp.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Trulyp self-hosted
- Response status
- Fix1.1.1 available
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Version1.1.1 released in the Customer Portal October21 at23:03 CEST.
Scope: Release availability does not establish customer installation; WBE and MailScheduler SaaS are separate.
What users should do
Install the applicable official update and verify operation.
Official service URL
Source URLs
- Trulyp: PHP vulnerability responsehttps://www.trulyp.com/blog/php2shell-a-summary-of-our-response/Response evidence
- https://status.trulyp.com/https://status.trulyp.com/Response evidence
WriteBackExtreme self-hosted
- Response status
- Fix6.3.1 / 5.7.7 available
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Product updates released October21. October23 followup finds the new issue’s required combination absent; earlier updates remain required.
Scope: Updating another server PHP runtime does not update bundled PHP.
What users should do
Apply the product update; check bundled and separately managed PHP independently.
Source URLs
- Trulyp: PHP vulnerability responsehttps://www.trulyp.com/blog/php2shell-a-summary-of-our-response/Response evidence
- https://status.trulyp.com/https://status.trulyp.com/Response evidence
WriteBackExtreme SaaS
- Response status
- Patched, checked and restored
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
All SaaS environments reported updated, individually verified and restored October21 at21:36 CEST.
Scope: Separate from customer-installed editions. October23 product-code review also excludes the additional issue’s required combination.
What users should do
Use normally; report issues to support.
Source URLs
- Trulyp: PHP vulnerability responsehttps://www.trulyp.com/blog/php2shell-a-summary-of-our-response/Response evidence
- https://status.trulyp.com/https://status.trulyp.com/Response evidence
MailScheduler self-hosted
- Response status
- Fix5.1.4 available
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Product updates released October21. October23 followup finds the new issue’s required combination absent; earlier updates remain required.
Scope: Updating another server PHP runtime does not update bundled PHP.
What users should do
Apply the product update; check bundled and separately managed PHP independently.
Source URLs
- Trulyp: PHP vulnerability responsehttps://www.trulyp.com/blog/php2shell-a-summary-of-our-response/Response evidence
- https://status.trulyp.com/https://status.trulyp.com/Response evidence
MailScheduler SaaS
- Response status
- Patched, checked and restored
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
All SaaS environments reported updated, individually verified and restored October21 at21:36 CEST.
Scope: Separate from customer-installed editions. October23 product-code review also excludes the additional issue’s required combination.
What users should do
Use normally; report issues to support.
Source URLs
- Trulyp: PHP vulnerability responsehttps://www.trulyp.com/blog/php2shell-a-summary-of-our-response/Response evidence
- https://status.trulyp.com/https://status.trulyp.com/Response evidence
Related official sources
- Trulyp: PHP vulnerability responseOfficial notice
- Trulyp: operating-company informationOfficial information directory
Comments