Global PHP Critical Security Update Available

Action Required: Upgrade Vocality RoIP Systems to Software Release 9.1.2

Dear Vocality RoIP Customer,

Vocality RoIP software version 9.1.2 is now available and addresses the recently disclosed PHP
vulnerabilities CVE-2026-109618 and CVE-2026-109619. As noted in our previous Customer Security
Announcement, these vulnerabilities affect all previously released versions of Vocality RoIP software.

ACTION REQUIRED: Customers must upgrade all Vocality RoIP systems to software version
9.1.2 immediately.

How to Update
Online update (recommended): In the Vocality RoIP Web UI, go to Platform > Update and select
Check for Updates. The Vocality RoIP must have an active Internet connection.

Offline update: For systems without Internet access, download the software from the Vocality
Software Portal and upload it through the Web UI.

Step-by-step instructions for both methods are provided in Vocality RoIP Application Note 002 –
Software Update, available on the Vocality Product Portal.

Recommended Customer Actions
1. Identify all Vocality RoIP systems in your organization and upgrade each to version 9.1.2 using one
of the methods above, even if WAN Web UI access is currently disabled.

2. If you disabled WAN Web UI access in response to our previous advisory, keep it disabled
until version 9.1.2 has been successfully installed. It may then be re-enabled where your
deployment requires it. WAN Web UI access is disabled by default.

3. After installation, verify that each system operates normally before returning it to its required
operational configuration.

Current Status
At this time, Vocality has no evidence that any Vocality RoIP systems have been compromised
because of these vulnerabilities.

Technical Assistance
For assistance with the upgrade, submit a support request through the Vocality help desk at Vocality
Support.

We appreciate the prompt actions customers have taken in response to our previous advisory and
their cooperation while we completed and validated this security update.

Kind Regards

The Vocality RoIP Team