Scan2x Unaffected by PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
Avantech Software would like to reassure customers and partners that Scan2x and its related Avantech-developed software do not utilise PHP and are unaffected by CVE-2026-109618 and CVE-2026-109619, commonly referred to as “PHP2Shell”.
These recently disclosed vulnerabilities affect the PHP runtime used by certain websites and applications. As PHP is not a component of our affected-product assessment scope—Scan2x and its related Avantech-developed software—these vulnerabilities do not apply to these products.
No patches, configuration changes or other action are required for Scan2x or its related Avantech-developed software in response to these two CVEs. Customers can continue using these products as normal.
The security of our software and the confidence of our customers remain central to our work. If you have any questions about this notice, please contact your usual Avantech support representative.