All Clear: Security Patches Applied – Key Systems Back Online----- Online back again -----Dear customers, Background Two critical security vulnerabilities with a very high risk rating have been disclosed for PHP, a core technology in our system environment. This issue currently affects web system operators and IT security officers worldwide. Other organizations and institutions have likewise responded with precautionary restrictions or the shutdown of individual online services. Due to the high criticality of these vulnerabilities, and in order to best protect our systems and the data processed within them, we decided to take our system temporarily offline as a precautionary measure. We are pleased to inform you that the all-clear has been given: Our key systems have now been fully patched and are back online. The service is available to you largely as usual. What was done Our technical team has applied the available security updates for the two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, known as “PHP2Shell”) and verified them thoroughly. Following the completion of all tests and release checks, we were able to bring the core systems back online safely. A few smaller services are still being finalised and will be fully available again shortly. Security checks – no cause for concern As part of the restoration, we of course carried out extensive security checks. We found no indication that a security incident occurred. There are no signs that our systems or the data processed within them were compromised. As previously announced, the shutdown was a purely precautionary measure. Why we decided to shut down The decision to take our system temporarily offline was not an easy one for us – we are aware that a short-term unavailability can cause inconvenience for you. However, the data security of our customers was our top priority, and so we had to make this difficult decision. We chose to temporarily forgo availability rather than take even the slightest risk with your data. Recommendations from public authorities and organizations We were not alone in this assessment: numerous public authorities and organizations – including the German Federal Office for Information Security (BSI) and the EU cybersecurity agency CERT-EU – explicitly advised operators of web systems to take precautionary measures, up to and including shutting down affected services. Many cities, government agencies, and companies also took their online services offline as a precaution. You can find official information here:
And if something still comes up? Should you nevertheless notice anything unexpected, or should a side effect of the updates cause something not to work as usual, please do not hesitate to contact us. We will follow up on any report immediately. We sincerely thank you for your understanding and your patience during the shutdown. If you have any questions, we are of course happy to help at any time. |