Last Updated: November 9, 2026
Vulnerability Overview
On October 21, 2026, the PHP Group published a security advisory regarding multiple vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619).
Regarding potential impact to Yokogawa products, please check below.
Potential impact on Yokogawa Products
The information confirmed as of the date of this notice is provided below.
[Unaffected Products]
The product itself has been confirmed to be unaffected. For applications and other software installed on the same PC as this product—such as engineering software—please check with the respective manufacturers to confirm whether they are affected.
- FA-M3
- CENTUM VP
- ProSafe-RS/ ProSafe-RS Lite
- STARDOM
- CI Server
- Exaopc
- Exaplog
- Exaquantum Families
- Yokogawa Virtualization Platform
- Dual-redundant Platform
- PRM
- PRM Commissioning Support Package (PRMCSP)
- Field Commissioning Support Package (F-CSP)
- InsightSuiteAE（ISAE）
- Integrated Recipe Manager (IRM)
- Insightful Process Estimator (IPE)
- Robot Management Core (RMC)
- Plant Image Analyzer (PIA)
- Smart Operation Navigator (SON)
- Plant Video Integrator (PVI)
- Data Model Broker
- Open Automation SI Kit / OPC UA Management Package
- VTS Portal
- TuneVP/CLPM
- OpreX Intelligent Edge Controller A8
- FAST/TOOLS
- Customer Service Management Software ServAir Cloud
- eServ
- OpreX Batch MES
- Exapilot
- AAASuite
- Digital Plant Operation Intelligence
- Process Data Analytics
- OpreX LIMS
- TriFellows
- B/M9000VP
- ES-5
- WEBFREXNV
- WEBFREX3ES
- Platform for Advanced Control and Estimation
- Operations Management
- Field Assistant
- Control of Work
- Intelligent Manufacturing Hub
- YS1000 Series
- UTAdvanced/TC10
- UXTA (various series, including VJ, M, D/R, P, etc.)
- AR Series
- PR720, UPM100/UPM101
- I/O VZ20X
- SMARTDAC+ (GX/GP/GM, SMART 920)
- DAQSTATION DXAdvanced (DX1000/DX1000N/DX2000)
- FX1000 Series
- μR10000/μR20000 Series
- Hardware Configurator
- Universal Viewer
- IP Address Configurator for GM10
- DAQStudio (DXA170)
- Mobile WEB Application for GX/GP/GM
- GM Mobile Tool
- Auto Report and File Conversion Software (RF10)
- Offline version: Equipment/Quality Predictive Detection tool (OE10)
- Wireless Input Unit Tool
- MH920 Console International
- GA10 Data Logging Software
- GA10CL
- Modbus Device Definition File Creating Tool
- GateWT for GA10
- DAQSTANDARD (DXA120)
- DAQSTANDARD (FXA120)
- DAQManager (DXA250)
- RXA10 Configuration Software
- FieldMate
- Flow Configuration Software (FSA120)
- Magnetic Flowmeter/Vortex Flowmeter Verification Tool (FSA130)
- Advanced Regulatory Controls (ARC)
Yokogawa is continuing to assess the potential impact on other Yokogawa products.
If any affected products are identified, Yokogawa will provide detail information as soon as countermeasures become available.
Yokogawa Security Advisory Report List
https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/
The Yokogawa Group Vulnerability Handling Policy
https://www.yokogawa.com/solutions/products-and-services/lifecycle-services/safety-and-security/announcements/vulpolicy/
To help reduce cybersecurity risks, Yokogawa recommends implementing security measures for the overall systems, not only for the vulnerabilities described in this notice.
*Examples of security measures include applying patches, antivirus protection, application whitelisting, system hardening, backups, firewalls, and network segmentation.
References
- The PHP Group
Security advisory: Critical remote code execution vulnerabilities, update now
https://www.php.net/archive/2026.php#2026-10-21-5 - CISA
Critical Vulnerabilities in PHP Require Immediate Patching | CISA
Looking for more information on our people, technology and solutions?
Contact Us