| 安全公告编号 | 26102301 |
|---|---|
| 公告 | ASRock Industrial Website PHP Security Update Completed |
| 发布日期 | 2026-10-23 |
| 影响产品 |
ASRock Industrial official website (www.asrockind.com). This notice covers the website only. For product security information, please refer to the individual advisories in the ASRock Industrial Security Center. |
| 安全公告类别 | |
| 严重等级 |
Critical — CVE-2026-109618, CVE-2026-109619, CVSS 4.0 base score 9.2 (as rated by the PHP project) |
| 影响漏洞 |
On October 21, 2026, the PHP project disclosed two vulnerabilities (CVE-2026-109618 and CVE-2026-109619, commonly referred to as PHP2Shell) that, under certain conditions, could allow a remote attacker to execute code on a web server. The ASRock Industrial website has been updated. No action is required from customers. |
| 报告 | ASRock Industrial has completed a PHP security update for its official website in response to the vulnerabilities disclosed by the PHP project on October 21 (CVE-2026-109618 and CVE-2026-109619). On October 22, 2026, the website environment was updated to a patched release published by the PHP project.
|