VertiGIS uses this page to provide centralized information about the critical vulnerability CVE-2026-109618 and CVE-2026-109619, collectively referred to as PHP2Shell, and the impact on VertiGIS product families.
This article will be updated as new information becomes available.
Product families not affected:
- VertiGIS LM (further information)
- VertiGIS Studio
- VertiGIS Networks
- VertiGIS FM
- Geocortex
- GEONIS Datashop
- GEONIS server
- ConnectMaster
- Pinpoint
- M4 Solutions
- UT for ArcGIS
- UT Web
- WebOffice
- GeoOffice
- 3A (further information)
- VertiGIS 1Integrate
- VertiGIS 1DataGateway
- VertiGIS 1Engage
- VertiGIS 1Streetworks
- 1SMS
- 1Edit
- arcOpole PRO Foncier (PCIBase, widgets, ADS)
- arcOpole PRO Cadastre
- arcOpole PRO DT-DICT
- arcOpole PRO PCRS
- arcOpole PRO DVF
- arcOpole PRO Intervention
- arcOpole PRO Mobile
- arcOpole PRO DPA
- arcOpole PRO GPV
- arcOpole PRO Exploitation des Routes
- arcOpole PRO Référentiel Voirie
- 1Water
- 1Lighting
- Elyx
- 1RealWorld
- 1Telecomms
- GIS Framework
- Orus
Partner products not affected:
- ArcGIS Enterprise
- FME Flow
- FME Form
- BARAL: UTJSC (Version 4.x and 5.x)
- BARAL: APAK (Version 16.x)
- BARAL: Web DataExport (Version 2.x)
Partner products affected :
- MapGuide Open Source: Analysis in progress
- Matomo: Some customers may have installed this extension alongside our products. Please contact the solution provider.
Comments
0 comments
Article is closed for comments.