Critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) have been disclosed in PHP*. These vulnerabilities could allow remote attackers to execute arbitrary code.
The information provided below shows whether SATO Group products and services are affected by these vulnerabilities as of the date of publication.
Updated October 28, 2026
Unaffected Products (No PHP in use)
<Printers and Related Products>
- CL4NX、CL4NX-J Plus、CL4NX-Plus、CL4-SXR
- CL6NX、CL6NX-J Plus、CL6NX-Plus、CL6-SXR
- PW4NX、PW208NX、PW2NX、PW208mNX
- CT4-LX、CT4-LX-HC、HC4-LX
- S84/86-NX
- TOUGHARM（LR4NX-FA）
- L'esprit series
- All printer drivers
- SATO Online Services
- Multi LABELIST series
<Solution/Software>
- IritoDe series
- ASETRA
<Others>
- SATO Internet Order System
- SATO Smart Report
- Supplier Web
Remediated Products (PHP in use; security measures completed)
<Printers and Related Products>
- SATO App Storage (No related damage has been confirmed at this time.)
- SATO ID AUTH (No related damage has been confirmed at this time.)
We will provide updates on our other products as soon as their status has been confirmed.
For questions and inquiries, please fill out our contact form here.