PHP Vulnerability Responses by Company

Tsukaeru

Japan-based services
Aliases / services
使えるねっと / Tsukaeru / waffle / 使えるクラウド
Official website
https://www.tsukaeru.net/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared / legacy hosting; VPS / dedicated; Tsukaeru waffle

Response status
Environment-specific fixes, switching and mitigation
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Eligible legacy hosts at121.50.41.231/.232 offer patched PHP7.4.33,8.0.30,8.1.34,8.3.36. Some legacy contracts have mitigation/migration guidance. Waffle management measures and WAF rules are applied.

Scope: Contract30hosting is rolling out; some1001000–1050600contracts have mitigation only. WAF does not replace runtime updates.

What users should do

Match contract/IP and switch unpatched PHP after compatibility checks. Update customer-root VPS/dedicated servers; use the FAQ for legacy-panel display issues.

Official service URL

Source URLs

  1. Tsukaeru: PHP impact and responsehttps://www.tsukaeru.net/news/20261022/Response evidence
  2. https://support.tsukaeru.net/ja-JP/support/solutions/articles/65000193026https://support.tsukaeru.net/ja-JP/support/solutions/articles/65000193026Service and operation documentation

Tsukaeru File Bako

Response status
Officially reported unaffected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice reports this service unaffected.

Scope: This does not cover PHP on other servers.

What users should do

Follow service notices.

Source URLs

  1. Tsukaeru: PHP impact and responsehttps://www.tsukaeru.net/news/20261022/Response evidence
  2. https://www.tsukaeru.net/file-bako/https://www.tsukaeru.net/file-bako/Service and operation documentation

Tsukaeru Mail Buster

Response status
Necessary measures complete
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The provider reports necessary measures completed.

Scope: Exact patched packages are not disclosed.

What users should do

Check further notices.

Source URLs

  1. Tsukaeru: PHP impact and responsehttps://www.tsukaeru.net/news/20261022/Response evidence
  2. https://www.tsukaeru.net/mail-buster/https://www.tsukaeru.net/mail-buster/Service and operation documentation

Tsukaeru Data Protect (formerly Cloud Backup)

Response status
Listed functions unaffected
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Backup storage, management UI and backup functions are reported unaffected.

Scope: This assessment covers storage and backup functions. Check PHP on protected servers separately.

What users should do

Check PHP on protected servers separately.

Source URLs

  1. Tsukaeru: PHP impact and responsehttps://www.tsukaeru.net/news/20261022/Response evidence
  2. https://www.tsukaeru.net/data-protect/https://www.tsukaeru.net/data-protect/Service and operation documentation

Tsukaeru Private Cloud

Response status
Necessary measures complete
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The provider reports necessary service measures completed.

Scope: This does not confirm every guest PHP runtime was patched.

What users should do

Verify customer-managed PHP with the responsible administrator.

Source URLs

  1. Tsukaeru: PHP impact and responsehttps://www.tsukaeru.net/news/20261022/Response evidence
  2. https://www.tsukaeru.net/private-cloud/https://www.tsukaeru.net/private-cloud/Service and operation documentation
Related official sources
  1. Tsukaeru: PHP impact and responseOfficial information directory

Comments