PHP Vulnerability Responses by Company

Suprema

Global cloud / infrastructure
Aliases / services
Suprema / Suprema Inc. / BioStar X / BioStar 2 / BioStar Air / CLUe / Airfob Portal
Official website
https://www.supremainc.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Listed products use no PHP; unaffected
Response information checked
2026-10-27 Rechecked: 2026-10-27

Access control products and cloud services from South Korean developer Suprema Inc., the supplier of BioStar products.

On October 22, Suprema confirmed that BioStar X, BioStar 2, BioStar Air, CLUe and Airfob Portal do not use PHP and are unaffected by either vulnerability.

What users should do

No PHP patch is required for the listed products. Check integrated third-party products or custom systems with their respective providers.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://supremats.freshdesk.com/en/support/solutions/articles/24000107355-suprema-products-not-affected-by-php-vulnerabilities-cve-2026-109618-cve-2026-109619-Response evidence
  2. Operating entityhttps://supremainc.com/en/util/bioStar-air-privacy-policy.htmlService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments