Search

PHP Vulnerabilities (CVE-2026-109618、CVE-2026-109619)

Canon Security Advisory

Overview:

It was announced that there are security vulnerabilities that affect PHP provided by The PHP Group. PHP is the programming language used for web server functions. PHP has vulnerabilities that could allow an attacker to execute arbitrary code if exploited. (CVE-2026-109618、CVE-2026-109619)

Vulnerability Overview:
CVSS score (v4.0) is 9.2 (CRITICAL). (CNA: PHP)

Affected versions are

- PHP versions 8.2.* before 8.2.35

- PHP versions 8.3.* before 8.3.36

- PHP versions 8.4.* before 8.4.27

- PHP versions 8.5.* before 8.5.12

Possible Affected Canon's medical products:

Regarding Medical Imaging products, Healthcare IT products and IVD products, PHP is not used.　 At this time, no adverse impact has been confirmed. If any impact is found, it will be informed to customers immediately.

Response to the vulnerability:

For any inquiries from customers regarding this matter, please contact your nearest branch office or sales office. For the contact information of the branch offices and sales offices in each region, please refer to the “Global Network (Countries and Regions)” page below.

https://global.medical.canon/about-us/medical-group-global-network/

Due to medical device regulatory reasons, not all products/service displayed on this webpage are available in all countries, regions or markets. Future availability of the products/service cannot also be guaranteed. Please contact your local Canon Medical Group representative for further details.

Development and manufacturing functions of Canon Medical Systems Corporation have been transferred to CANON INC. In this website, any reference to “Canon Medical Systems Corporation” refers to “CANON INC.”