1. Homeページ
  2. Security Center
  3. Website
  4. ASRock Industrial Website PHP Security Update Completed

Security Center

Advisory Number 26102301
Advisories ASRock Industrial Website PHP Security Update Completed
Release date 2026-10-23
Affected Products ASRock Industrial official website (www.asrockind.com). This notice covers the website only. For product security information, please refer to the individual advisories in the ASRock Industrial Security Center.
Advisory Category
Severity rating Critical — CVE-2026-109618, CVE-2026-109619, CVSS 4.0 base score 9.2 (as rated by the PHP project)
Impact of vulnerability On October 21, 2026, the PHP project disclosed two vulnerabilities (CVE-2026-109618 and CVE-2026-109619, commonly referred to as PHP2Shell) that, under certain conditions, could allow a remote attacker to execute code on a web server. The ASRock Industrial website has been updated. No action is required from customers.
Report

ASRock Industrial has completed a PHP security update for its official website in response to the vulnerabilities disclosed by the PHP project on October 21 (CVE-2026-109618 and CVE-2026-109619). On October 22, 2026, the website environment was updated to a patched release published by the PHP project.


Following the update, the ASRock Industrial security team reviewed website records covering the period from public disclosure to completion of the update and found no indication of intrusion, website defacement, or data leakage. Customers can continue to browse and use the ASRock Industrial website with confidence, including product information, the Download Center, and technical support services. No password change or other action is required.


ASRock Industrial will continue to follow developments related to these vulnerabilities and keep its website and related systems up to date under its established security maintenance procedures.


If you identify a suspected security issue related to ASRock Industrial products or services, please contact us at ASRI_security@asrockind.com. Please encrypt sensitive technical information using the PGP public key published in our Security Center. We thank everyone who helps keep the online environment secure.