KbPort Security Advisory Response

Subject: PHP Security Vulnerabilities – CVE-2026-109618 and CVE-2026-109619

Date: October 22, 2026

KbPort is aware of the recently disclosed critical security vulnerabilities affecting PHP, identified as CVE-2026-109618 and CVE-2026-109619.

KbPort’s Simplicity7 and Medication Dispensing System (MDS) solutions do not utilize PHP as part of their application architecture. Accordingly, these products are not affected by the reported PHP vulnerabilities, and no product-specific patches or configuration changes are required to address these issues.

KbPort remains committed to monitoring emerging security threats and maintaining the security and integrity of our solutions.

Customers should continue to follow their organization’s established security practices for independently managed infrastructure and third-party applications.

For additional questions, please contact KbPort Support.