Impact of Vulnerabilities CVE-2026-109618 and CVE-2026-109619 on Our Products
On October 21, 2026, two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) were disclosed. The following provides an overview of the vulnerabilities and the recommended countermeasures.
Summary
- CVE-2026-109618: Remote Code Execution Caused by Memory Corruption During an Out-of-Memory Condition.
- CVE-2026-109619: Remote Code Execution Caused by Residual Internal State.
If these vulnerabilities are exploited, an unauthenticated remote attacker may be able to execute arbitrary code on an affected system. This could affect the confidentiality, integrity, and availability of data and services, including unauthorized access to information, modification of system data, installation of malicious software, and service disruption.
Impact on our products
Our investigation into the impact on our products confirmed that MyQ and aQrate are affected.
Affected products
- MyQ / aQrate: Version 10.2 (Patch 26) and earlier
- MyQ / aQrate: Version 8.2 (Patch 61) and earlier
- Printing System 50/50A: Version-independent
- Printing System 18: Version-independent
- Printing System 17: Version-independent
- Printing System 15/16: Version-independent
Countermeasures
No permanent workaround is available. The security patch must be applied.
Until the fixed version is applied, prevent direct access from the internet and restrict access to only the required networks, users, and devices. Monitoring the server for suspicious activity may help reduce the risk.
Update: 11.11.2026
Until the fixed version is applied, prevent direct access from the internet and restrict access to only the required networks, users, and devices. Monitoring the server for suspicious activity may help reduce the risk.
Update: 11.11.2026
| Affected products | Countermeasures |
| MyQ / aQrate: Version 10.2 (Patch 26) and earlier | MyQ / aQrate 10.2 (Patch 29) is now available in the Downloads section. |
| aQrate: Version 8.2 (Patch 61) and earlier | aQrate 8.2 (Patch 62) is now available in the Downloads section. |
| Printing System 50/50A | We will provide further information as soon as the security patches are ready. |
| Printing System 18 | We will provide further information as soon as the security patches are ready. |
| Printing System 17 | We will provide further information as soon as the security patches are ready. |
| Printing System 15/16 | We will provide further information as soon as the security patches are ready. |