We are aware of the recently disclosed critical security vulnerabilities affecting PHP, including CVE-2026-109618 and CVE-2026-109619.
Sicon Products
We would like to reassure you that PHP is not used within any of our Sicon products. As a result, our products are not affected by these vulnerabilities and no action or product updates are required from our Customers or Business Partners in relation to them.
Sicon Website
Our website infrastructure, which runs on WordPress and PHP, has already been updated and secured against this vulnerability. The necessary patches have been applied, mitigating the risk associated with affected PHP versions and ensuring our websites remain protected.
We have reviewed our exposure following the security notification and will, as always, continue to monitor relevant security advisories and assess any potential impact on our products. If you receive any questions from Customers regarding these PHP vulnerabilities, you can confirm that Sicon products are not affected.
