PHP Vulnerability Responses by Company

Webfactory

Global hosting
Aliases / services
Webfactory / webfactory.de
Official website
https://www.webfactory.de/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Managed Webhosting / wfDynamic

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Webfactory reports that new PHP builds were deployed across all servers it operates at 17:15 on October 21, after which temporary upload blocks were removed. wfDynamic uploads remained available through a separate mechanism.

Scope: Covers company-operated servers. The wfDynamic exception describes its upload path, not immunity of the whole product.

What users should do

Check upload forms after the update and contact the hosting team if problems remain.

Official service URL

Source URLs

  1. Webfactory: PHP security responsehttps://www.webfactory.de/blog/php-sicherheitsluecke-2026-10Response evidence
Related official sources
  1. Webfactory: PHP security responseOfficial notice

Comments