Toshiba Australia Statement Regarding Critical PHP Vulnerabilities

Toshiba Australia is aware of the recently disclosed critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which were publicly disclosed on 21 October 2026.

Our Product Security, IT, and Engineering teams have been actively reviewing these vulnerabilities to determine any potential impact on Toshiba Australia operated systems, services, and supported solutions.

At this time, we have not identified any impact to Toshiba Australia business operations, products, services, or customer environments resulting from these vulnerabilities. 

As a precautionary measure, we have reviewed our infrastructure and are implementing appropriate security updates and mitigations where required.

Toshiba Australia continues to work closely with our technology partners and vendors to assess any potential implications across our product and service portfolio. 
Our investigations remain ongoing, and we will continue to monitor developments and evaluate any new information as it becomes available.

Should any Toshiba products, services, or customer environments be identified as requiring specific action or remediation, further guidance will be communicated through the appropriate Toshiba Australia support channels.

We recommend that customers follow vendor security advisories and apply relevant security updates in accordance with their organisation's cybersecurity policies and procedures.

For further information or assistance, please contact Toshiba Australia Technical Support through your usual support channel.