Dear Customer,

ANTlabs is aware of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. We take this matter seriously and have promptly evaluated the potential impact on our products, prioritising the development and release of the necessary security updates.

Security Remediation Schedule

SG5

• • SG5 Security Hotfix Update 18 (U18) has been released and includes the necessary remediation for these vulnerabilities.
•    Please see this link for the release note: SG 5 Update #18

The updates apply to the following product:

• • SG Express 5000
• • SG Express 5100
  
• • SG Express 5200
• • SG Express 5200-10GE
• • vSG Express
• • SG Pro 5400
• • SG Pro 5410
• • vSG Pro
• • IG4 S-series (upgraded with v5 software)

ASP

• ASP 2.9.3, which includes the necessary security remediation, is scheduled for release on 23 October 2026.

Recommended Customer Action

Please take immediate action to schedule and apply the applicable security update

Please retain and refer to this advisory for the latest release schedule. We will update this advisory as new information and security updates become available.

If you have any questions, require clarification, or need assistance, please contact ANTlabs Technical Support:

24-hour hotline: +65 6100-7877
US customers: +1-904-430-8477
Email: tech-support@antlabs.com