NavVis incident
Security Update: PHP2Shell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Ongoing since 08:15 AM UTC, affecting Cloud Infrastructure.
Dear Customers, We would like to inform you that IVION is not affected by the recently disclosed PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), as IVION does not use PHP. Our ACC and Revizto connector applications, which use PHP, have already been updated to a secure, patched version. No action is required on your part. We remain committed to maintaining the security and reliability of our services.
Affected components
Update timeline
- monitoring Oct 22, 2026, 08:15 AM UTC
Dear Customers, We would like to inform you that IVION is not affected by the recently disclosed PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), as IVION does not use PHP. Our ACC and Revizto connector applications, which use PHP, have already been updated to a secure, patched version. No action is required on your part. We remain committed to maintaining the security and reliability of our services.
Your product runs on more than NavVis
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services