Ignition is not affected by the “PHP2Shell” memory safety vulnerabilities in core PHP (CVE-2026-109618, CVE-2026-109619).
Ignition is a Java application that ships its own JRE. No Inductive Automation component (Gateway, Designer, Vision Client, Perspective, launchers, Workstation) includes, depends on, or executes PHP.
No customer action is required.
Assessed July 31, 2026. Posted in Trust Center Ignition Software: Library Vulns / Updates.