Notice: Mirasys VMS Does Not Use PHP Technology

Cybersecurity has been a prominent topic in recent days following the disclosure of two critical PHP vulnerabilities. According to the Finnish Transport and Communications Agency (Traficom) Cyber Security Centre, the vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow an attacker to execute remote code on a vulnerable server and potentially take full control of the system. Organizations using PHP-based applications have been advised to update affected installations immediately.

‍

Recent reports of security vulnerabilities affecting PHP-based applications have raised questions among our customers about whether these issues impact Mirasys systems. We would like to clarify that Mirasys VMS and its related software components do not use PHP technology. As a result, PHP-related vulnerabilities do not affect Mirasys VMS environments.

‍

While these vulnerabilities are not applicable to Mirasys products, we continuously monitor the cybersecurity landscape and actively assess potential risks and security updates related to third-party technologies. Security remains a key part of our product development and maintenance processes.

‍

If you have any questions regarding the security or architecture of Mirasys solutions, please contact Mirasys Support.