Country selector
Corporate
Country Selector: Corporate
Baar, Switzerland, 02 November 2026
Ascom assessed the company-wide impact of the recently disclosed PHP vulnerabilities CVE -2026 -109618 and CVE -2026 -109619 on its products, solutions, and systems. Product and technical teams have reviewed affected PHP versions and embedded components and have implemented remediation where necessary. The results of the review, the latest information, and product -specific details — including affected versions, the availability of corrective measures, and any necessary actions on the part of customers — are announced in this information news.
Ascom products are designed to be deployed on internal networks without direct Internet exposure, and they are not exposed to external attackers. The overall security of the deployment remains dependent on the security controls and risk management measures implemented within the customer network environment.
Ascom advises customers to follow established cybersecurity best practices by limiting unnecessary external network access and applying supported software and security updates as they become available.
The investigation status is summarized below.
Product
Status
Digistat
Not affected
SmartSense
Not affected
Ofelia
Not affected
Mobility
Not affected
Telligence
Not affected
teleCARE
See comment below
Unite
See comment below
AFFECTED PRODUCTS IN TELECARE
· vMARi embedded in the vNISM
All other products within patient systems like Telligence or the vNISM are NOT impacted by this issue
RESOLUTION
The results of the assessment showed that the risk is low. Based on that, Ascom has decided not to deliver a hotfix.
Ascom will incorporate the resolution in the Q4 release of teleCARE IP planned to be released on December 18th.
In the meantime, customers are strongly encouraged to review network exposure and ensure that access to product web services is limited to trusted networks and authorized users.
AFFECTED PRODUCTS IN UNITE
Unite products are designed for deployment within protected customer networks and are not intended to be directly exposed to the Internet. As a best security practice, access to product web interfaces shall be restricted by using firewalls and network access controls so that only authorized users and systems can connect to them which will reduce the exposure. Make sure the installation is made according to the installation guides provided and in a restricted network.
Affected products
Elise3 products
Software distributions
Resolution
Software updates were made available on October 30, 2026.
Customers requiring assistance in determining whether a specific system or product release is affected should contact their local Ascom representative or Ascom Global Support at support@ascom.com.
Security-related questions or vulnerability reports can also be submitted through Ascom's established Product Security process.