Investigation into MiiTel's Exposure to the PHP Vulnerability (PHP2Shell)
We investigated the impact of the PHP vulnerability (PHP2Shell / CVE-2026-109618, CVE-2026-109619), reported on October 21, 2026. As a result, we confirmed that MiiTel services are NOT affected.
Here are the details.
1. Impact on MiiTel Services
MiiTel services are not affected by this vulnerability as they do not use PHP.
2. Impact on Third-Party Services
Based on information available at this time, we have found NO impact on any third-party services used internally by MiiTel.
3. About the Third party Integration Services
For third-party services integrated with MiiTel (such as Salesforce or kintone), please check the updates directly from each service provider.
Based on public updates from major integration providers (such as Salesforce, HubSpot, kintone, and Amazon S3), no service outages, maintenance, or other impacts related to this vulnerability have been reported at this time.
4. Impact on Our Product Information and Corporate Websites
The product information website (miitel.com) and the corporate website (revcomm.com) use WordPress and PHP.
We have confirmed that our hosting provider applied a patch for this vulnerability on October 22.
If we learn of any new information, we will provide updates in this announcement or through a separate notice.
If you have any questions, please contact us.