PHP Vulnerability Responses by Company

YPOK SAS

Global hosting
Aliases / services
YPOK / YPOK SAS / ypok.com / YPolice / YGRC
Official website
https://www.ypok.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

YPolice SaaS

Response status
PHP patch applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 22 notice reports patched PHP installed October 21, 17:45–18:15 Paris time.

Scope: YPOK-hosted YPolice only; YGRC versions and self-hosting are separate.

What users should do

No technical action; report anomalies through YService.

Official service URL

Source URLs

  1. YPOK: PHP vulnerability responsehttps://www.ypok.com/Response evidence
  2. https://www.ypok.com/mentions-legales/https://www.ypok.com/mentions-legales/Service and operation documentation

YGRC 3.0 SaaS

Response status
PHP fix applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October notice reports fixed PHP applied the previous day between 18:15 and 18:30 Paris time.

Scope: Only YPOK-hosted 3.0; this does not cover 2.4 or on-premises deployments.

What users should do

No technical action required; report anomalies to support.

Source URLs

  1. YPOK: PHP vulnerability responsehttps://www.ypok.com/Response evidence

YGRC 2.4 SaaS

Response status
Partial mitigation; migration to 3.0 planned
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

As of the 22 October notice, no fixed version was available. Disabling upload progress and using a fresh process per request partially mitigates risk; migration to 3.0 is planned.

Scope: Interim mitigation is not a complete patch; migration completion has not been confirmed in a follow-up.

What users should do

Follow the provider’s migration instructions and confirm the 3.0 schedule.

Source URLs

  1. YPOK: PHP vulnerability responsehttps://www.ypok.com/Response evidence

YGRC on-premises deployments

Response status
Separate guidance planned; deployment status not listed
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October official notice promises separate communication for on-premises YGRC customers. SaaS patch times do not establish on-premises remediation.

Scope: Do not infer that later private guidance or actual patching has occurred.

What users should do

Ask official support about affected PHP and required update steps, then coordinate with your administrator.

Source URLs

  1. YPOK: PHP vulnerability responsehttps://www.ypok.com/Response evidence
Related official sources
  1. YPOK: PHP vulnerability responseOfficial notice
  2. YPOK: Operating company informationOfficial information directory

Comments