Trust Center

Change of registered address

Effective November 9, 2026, Blaze Information Security GmbH has moved its registered office to:

Friedrichstraße 155
10117 Berlin
Germany

Our legal entity, commercial register number (HRB 241746 B) and contact channels are unchanged. Please update your vendor and contract records accordingly.

Linux kernel TCP vulnerability (CVE-2026-98432)

Blaze Information Security is investigating whether its server infrastructure is affected by CVE-2026-98432, a race condition in the Linux kernel's IPv4 TCP connection handling. If affected systems are found, we will apply patches outside our normal patch cycle. This statement will be updated once our investigation is complete.

Update on Node2Shell (CVE-2026-111497)

Our review is complete. On October 22, 2026, Blaze Information Security upgraded to Node.js 26.12.1, which includes the fix for this vulnerability. Our systems are not vulnerable to Node2Shell, and we found no evidence of exploitation.

Node2Shell (CVE-2026-111497)

Blaze Information Security is reviewing its codebase and services for exposure to the Node.js Brotli vulnerability known as Node2Shell. So far we have found no evidence that our systems are vulnerable and no evidence of exploitation. Our review continues, and this statement will be updated should that assessment change.

PHP2Shell (CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560)

Blaze Information Security does not use PHP in its production systems or internal services, so it is not affected by these vulnerabilities. We have found no evidence of exploitation in our environment.

Our subprocessor list is now published on this Trust Center, under Legal > Subprocessors.

We will announce changes here at least 15 days before they take effect. Subscribe to this Trust Center to be notified by email. Questions or objections: privacy@blazeinfosec.com