Office File Creator Is Not Affected by the PHP Vulnerabilities (PHP2shell)

This is to inform you of the impact on Office File Creator of the PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619: PHP2shell) disclosed on October 21, 2026.

Office File Creator is an application that runs only on Salesforce. It does not use PHP and does not communicate with any external servers, so it is not affected by these vulnerabilities.

* Our website (product pages and instruction manual) was patched by our server provider early in the morning of October 22, 2026 (Japan time).

Reference

Security advisory: Critical remote code execution vulnerabilities, update now