PHP Vulnerability Responses by Company

Leica Biosystems

Global cloud / infrastructure
Aliases / services
Leica Biosystems / Aperio eSlide Manager / eSlide Manager / Leica Biosystems Nussloch GmbH / leicabiosystems.com
Official website
https://www.leicabiosystems.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Aperio eSlide Manager

Response status
Fixes and mitigations under testing
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Pathology and digital imaging systems.

All versions are potentially vulnerable. Leica is testing product-specific fixes and mitigations.

Scope: All eSlide Manager versions; Remote Service Software and other Aperio products have separate assessments.

What users should do

Remove Internet exposure and restrict access to required trusted systems. Disconnect from the network if adequate controls are impossible; do not replace bundled PHP independently.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.leicabiosystems.com/pt-br/about/php2shell-security-advisory/Response evidence
  2. https://www.leicabiosystems.com/pt-br/about/product-security-advisories/https://www.leicabiosystems.com/pt-br/about/product-security-advisories/Service and operation documentation
  3. Company identityhttps://www.leicabiosystems.com/de/ueber-uns/imprint/Service and operation documentation

Remote Service Software

Response status
Cloud infrastructure patched
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Leica reports patching the BeyondTrust Remote Support cloud infrastructure used by this service around 12:00 UTC on October 22, with no evidence of exploitation in the reviewed infrastructure.

Scope: The cloud portion used by Leica Remote Service Software, not eSlide Manager or customer PHP environments.

What users should do

No customer action is required for this cloud remediation.

Source URLs

  1. PHP2Shell response and scopehttps://www.leicabiosystems.com/pt-br/about/php2shell-security-advisory/Response evidence
  2. https://www.leicabiosystems.com/pt-br/about/product-security-advisories/https://www.leicabiosystems.com/pt-br/about/product-security-advisories/Service and operation documentation
  3. Company identityhttps://www.leicabiosystems.com/de/ueber-uns/imprint/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Company identityOfficial information directory

Comments