Customer notice on the Impact of Vulnerability in the Programming Language "PHP"

(2026-10-23)

Recently, vulnerabilities in "PHP" (CVE-2026-109618, CVE-2026-109619), a programming language used in web system development, have been disclosed. In response, we would like to inform our customers of the results of our investigation on our Analytical and Measuring Instrument products of their impact.
 
The following systems are affected by the vulnerability in PHP:
•    TOC-1000e, TOC-1000e S
Please DO NOT use the web page features for these systems until we provide updated versions of these systems. Please refer to the user manual for instructions on how to terminate the web features.  If you need assistance, please contact our sales representative or service personnel.
 
At the same time, we have confirmed that the following systems are NOT affected by the vulnerability in PHP:
•    LabSolutions series
•    Shimadzu Software License Management System (web system used for license management of products such as LabSolutions)
•    All other Analytical and Measuring Instruments software
 
We will inform our customers of updates to the affected systems as soon as they become available.
We would like to take this opportunity to thank you for your continued patronage.