We would like to provide an update on the impact of the PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) disclosed on October 21, 2026, on Elysium products.

We have confirmed that the following products do not use PHP and are not affected by these vulnerabilities.

Server-Based Solutions

  • 3D-SUITE TransServer
  • InfiPoints Cloud

Desktop Applications

  • All Elysium desktop applications

We will update this page if any new information becomes available.