Critical PHP Security Vulnerabilities: Successful Patch Day at centron
PHP2Shell: centron has closed the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 on managed servers. What…
Warning: our company name centron is currently being used by unknown parties in a misleading way to make claims about GoBD compliance.

We recently learned that our company name is being used by unknown parties in a misleading way to make statements about the GoBD compliance of websites. These messages do not come from us – centron has nothing whatsoever to do with these fraudulent activities.
No. centron does not send emails or make calls claiming that your website is not GoBD-compliant. Such messages come from third parties who are misusing the company name. Do not respond to them and report the incident to info@centron.de.
Have you received such a notification about the GoBD compliance of your website by email or phone? Then please be sure to observe the following points:
Do not respond: do not reply to the email or phone calls. Do not click on attached links or documents.
Keep a record: keep a copy of the email or the phone number. It may be needed for future investigations.
Let us know: please inform us immediately if you receive such an email or call. Only then can we respond appropriately.
The security and trust of our customers are our highest priority – verifiably documented in our Trust Center. We are working closely with the relevant authorities to resolve this situation as quickly as possible and to hold those responsible to account.
If you have any questions or concerns, for example about the actual GoBD compliance of your websites, please do not hesitate to contact us directly. We are here to help you and to clear up any uncertainty.
Thank you for your attention and understanding. We greatly value your trust in centron and will do our best to live up to it.
Kind regards,
Your centron team
Information on the incident at the Hallstadt data centre
Sign up now and get access to our cloud products.

PHP2Shell: centron has closed the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 on managed servers. What…

On 5 May 2026 at around 9:40 pm, a DNSSEC fault at the registry DENIC caused a nationwide outage for “.de” domains.

On 9 October 2025, an incident with a fire occurred at the Hallstadt data centre after maintenance work. No injuries, customer…
Sign up and receive €200 credit at centron within your first 60 days.
This promotional offer applies to new accounts only. Available exclusively to businesses.