Dragon Systems incident

Security update: PHP Security vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Ongoing since 07:01 PM UTC, affecting DAX Copilot Mobile - Login (US-01) and DAX Copilot for DMO - Login (US-01) and 1 more.

monitoring Oct 23, 2026, 07:54 PM UTC

We are continuing to monitor for any further issues.

Started: Oct 23, 2026, 07:01 PM UTC
Resolved: Ongoing
Duration: ● 3h 4m
Detected by Pingoru: Oct 23, 2026, 07:01 PM UTC

Affected components

DAX Copilot Mobile - Login (US-01)DAX Copilot for DMO - Login (US-01)Dragon Medical One - Login (United States)Dragon Medical One - Login (Canada)DAX Copilot for Epic - Audio Recording (US-01)DAX Copilot for Epic - Audio Recording (US-02)DAX Copilot for DMO - Login (US-02)DAX Copilot Mobile - Login (US-02)DAX Copilot for Epic - Audio Recording (US-03)DAX Copilot for DMO - Login (US-03)

Update timeline

monitoring Oct 23, 2026, 07:01 PM UTC

Microsoft is aware of and actively monitoring the PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and related activity. Based on the information currently available, Microsoft has found no evidence that these vulnerabilities have been exploited in connection with the following Microsoft-operated and developed systems: • Dragon Medical One • DAX Copilot • Dragon Copilot Microsoft has applied the available security updates for these vulnerabilities to the systems listed above.
monitoring Oct 23, 2026, 07:03 PM UTC

We are continuing to monitor for any further issues.
monitoring Oct 23, 2026, 07:54 PM UTC

We are continuing to monitor for any further issues.

Your product runs on more than Dragon Systems

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.