werkraum

Global hosting

Aliases / services: werkraum / werkraum.net / werkraum Digitalmanufaktur GmbH
Official website: https://werkraum.net/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

TYPO 3 website operations and maintenance

Response status: Hosting patched; individual checks continue
Response information checked: 2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Partner hosting was patched on 21 October and client sites restored by morning. The 26 October addendum recommends active-PHP checks, precautionary credential rotation and investigation.

Scope: Patching does not mean investigation is complete. Precautionary rotation does not confirm customer compromise.

What users should do

Coordinate PHP restart/backport checks and TYPO 3 encryptionKey rotation; preserve evidence and discuss clean rebuilding if compromise is found.

Official service URL

https://werkraum.net/

Source URLs

werkraum: PHP vulnerability responsehttps://werkraum.net/news/php2shell-kritische-php-luecken-cve-2026-109618-und-cve-2026-109619Response evidence

Related official sources

werkraum: PHP vulnerability responseOfficial notice