PHP Vulnerability Responses by Company

Utimaco

Global cloud / infrastructure
Aliases / services
Utimaco / Utimaco Inc. / Utimaco GmbH / Utimaco Management Services GmbH / Utimaco IS GmbH / CryptoServer / Atalla AT1000 / Enterprise Secure Key Manager / LAN Crypt
Official website
https://utimaco.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
No PHP dependency; unaffected
Response information checked
2026-10-24 Rechecked: 2026-10-27

HSM, key management, encryption and data protection products.

The October 23 assessment identifies HSMs, ESKM and KeyBridge, LAN Crypt and DiskEncrypt, and management/client tools as unaffected. The review covers firmware, OS images, management interfaces and supporting tools.

This recheck could not revalidate all listed information against current official sources. The previous verification date is retained. Check official notices or support for current availability and required action.

What users should do

No action is required for Utimaco products. Apply vendor updates to separate PHP systems in your environment.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://support.hsm.utimaco.com/documents/d/20182/cve-2026-109618_cve-2026-109619_php-vulnerabilitiesResponse evidence
  2. Operating entityhttps://utimaco.com/legalService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments