PHP Vulnerability Responses by Company

かがわ医療情報ネットワーク協議会

Japan-based services
Aliases / services
K-MIX R / K-MIX / K-MIX+ / Kagawa Medical Information Network Association / かがわ医療情報ネットワーク協議会
Official website
https://kmix-r.jp/
Sources identifying the operating company

The council operating K-MIX R; this does not assert a corporate legal form.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

K-MIX R remote image diagnosis

Response status
PHP fix applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

K-MIX R regional medical information network

The council's October 23 notice explicitly reports the PHP fix applied to remote image diagnosis, with no damage or unauthorized access found.

Scope: This covers remote image diagnosis. VPN/certificate controls alone are not the reason for the assessment; other K-MIX R functions have separate statuses.

What users should do

Continue normal use, keep endpoint OS/browser software updated and protect client certificates.

Official service URL

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence
  2. https://kmix-r.jp/info/https://kmix-r.jp/info/Service and operation documentation
  3. https://kmix-r.jp/abouthttps://kmix-r.jp/aboutService and operation documentation

Advanced medical-equipment sharing system

Response status
PHP fix applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 23 function table explicitly marks this PHP-based system as patched.

Scope: The council's sharing system, not a firmware assessment of the medical devices themselves.

What users should do

Continue normal use, endpoint updates and certificate protection.

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence

Record/image sharing: central storage, nine hospitals

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 23 official table says this scope does not use PHP and is unaffected.

Scope: Only the named K-MIX R functionality, not a general assessment of other facilities or products.

What users should do

Continue normal use; assess unrelated hospital systems separately.

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence

Record/image sharing: Human Bridge, eight hospitals

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 23 official table says this scope does not use PHP and is unaffected.

Scope: Only the named K-MIX R functionality, not a general assessment of other facilities or products.

What users should do

Continue normal use; assess unrelated hospital systems separately.

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence

Regional clinical critical-path system

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 23 official table says this scope does not use PHP and is unaffected.

Scope: Only the named K-MIX R functionality, not a general assessment of other facilities or products.

What users should do

Continue normal use; assess unrelated hospital systems separately.

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence

Long-term-care certification information exchange

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 23 official table says this scope does not use PHP and is unaffected.

Scope: Only the named K-MIX R functionality, not a general assessment of other facilities or products.

What users should do

Continue normal use; assess unrelated hospital systems separately.

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence

Physician opinions, care plans, file sharing and secure mail

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 23 official table says this scope does not use PHP and is unaffected.

Scope: Only the named K-MIX R functionality, not a general assessment of other facilities or products.

What users should do

Continue normal use; assess unrelated hospital systems separately.

Source URLs

  1. K-MIX R PHP vulnerability responsehttps://kmix-r.jp/info/2026/10/23/phpの脆弱性に関するk-mix-rの対応について/Response evidence
Related official sources
  1. K-MIX R PHP vulnerability responseOfficial notice
  2. Company and operator informationOfficial information directory

Comments