PHP Vulnerability Responses by Company

日本医師会ORCA管理機構株式会社

Japan-based services
Aliases / services
日本医師会ORCA管理機構株式会社 / ORCAMO / WebORCA / WebQKAN / 日特クラウド / Japan Medical Association ORCA Management Organization
Official website
https://www.orca.med.or.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

WebORCA Cloud

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

WebORCA, WebQKAN and Nittoku Cloud

The October 22 official notice explicitly states that WebORCA Cloud does not use PHP and is unaffected by this PHP vulnerability.

Scope: This covers WebORCA Cloud only; do not extend the assessment to unnamed products.

What users should do

Continue normal use; assess other hospital systems and integrations with their respective providers.

Official service URL

Source URLs

  1. Product impact of critical PHP vulnerabilitieshttps://www.orca.med.or.jp/news/receipt/20261022-4670.htmlResponse evidence
  2. https://www.orca.med.or.jp/news/https://www.orca.med.or.jp/news/Service and operation documentation
  3. https://www.orca.med.or.jp/receipt/users/https://www.orca.med.or.jp/receipt/users/Service and operation documentation
  4. https://www.orcamo.co.jp/company/https://www.orcamo.co.jp/company/Service and operation documentation

WebORCA on-premises

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 22 official notice explicitly identifies this product as non-PHP and unaffected.

Scope: Only the named product, not unnamed ORCA products or the broader hospital environment.

What users should do

Continue normal use and assess separate integrated systems independently.

Source URLs

  1. Product impact of critical PHP vulnerabilitieshttps://www.orca.med.or.jp/news/receipt/20261022-4670.htmlResponse evidence

WebQKAN Cloud

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 22 official notice explicitly identifies this product as non-PHP and unaffected.

Scope: Only the named product, not unnamed ORCA products or the broader hospital environment.

What users should do

Continue normal use and assess separate integrated systems independently.

Source URLs

  1. Product impact of critical PHP vulnerabilitieshttps://www.orca.med.or.jp/news/receipt/20261022-4670.htmlResponse evidence

Nittoku Cloud

Response status
Unaffected: PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 22 official notice explicitly identifies this product as non-PHP and unaffected.

Scope: Only the named product, not unnamed ORCA products or the broader hospital environment.

What users should do

Continue normal use and assess separate integrated systems independently.

Source URLs

  1. Product impact of critical PHP vulnerabilitieshttps://www.orca.med.or.jp/news/receipt/20261022-4670.htmlResponse evidence
Related official sources
  1. Product impact of critical PHP vulnerabilitiesOfficial notice
  2. Company and operator informationOfficial information directory

Comments