The German Federal Office for Information Security (BSI) is currently warning about two critical vulnerabilities in the PHP programming language. According to the BSI, attackers could exploit these vulnerabilities to remotely execute malicious code on web servers running PHP applications, without authentication or any user interaction. The vulnerabilities have been assigned a severity score of 9.2 out of 10 under CVSS 4.0 and are also referred to in cybersecurity circles as “PHP2Shell.”

We have promptly reviewed our products and systems and can confirm the following:

Our luxData products and the services we provide are not affected by these vulnerabilities.

No action is required on your part as a customer.

Information security is our highest priority. As a company certified to ISO/IEC 27001, with hosting infrastructure located in Germany, we continuously monitor the security landscape and respond quickly to emerging threats. Should any further vulnerabilities arise in the future, we will provide updates here.

If you have any questions, please contact us at +49 (0) 8051 96557-0 or info@sixdata.de.

Further information: BSI Cybersecurity Warning