Transform retail operations with Zebra’s retail technology solutions, featuring hardware and software for improving inventory management and empowering teams.
Streamline operations with Zebra’s healthcare technology solutions, featuring hardware and software to improve staff collaboration and optimise workflows.
Enhance processes with Zebra’s manufacturing technology solutions, featuring hardware and software for automation, data analysis, and factory connectivity.
Zebra’s transportation and logistics technology solutions feature hardware and software for enhancing route planning, visibility, and automating processes.
Zebra's hospitality technology solutions equip your hotel and restaurant staff to deliver superior customer and guest service through inventory tracking and more.
Zebra's market-leading solutions and products improve customer satisfaction with a lower cost per interaction by keeping service representatives connected with colleagues, customers, management and the tools they use to satisfy customers across the supply chain.
Empower your field workers with purpose-driven mobile technology solutions to help them capture and share critical data in any environment.
Zebra's range of mobile computers equip your workforce with the devices they need from handhelds and tablets to wearables and vehicle-mounted computers.
Zebra's desktop, mobile, industrial, and portable printers for barcode labels, receipts, RFID tags and cards give you smarter ways to track and manage assets.
Zebra's 1D and 2D corded and cordless barcode scanners anticipate any scanning challenge in a variety of environments, whether retail, healthcare, T&L or manufacturing.
Zebra's extensive range of RAIN RFID readers, antennas, and printers give you consistent and accurate tracking.
Choose Zebra's reliable barcode, RFID and card supplies carefully selected to ensure high performance, print quality, durability and readability.
Zebra's rugged tablets and 2-in-1 laptops are thin and lightweight, yet rugged to work wherever you do on familiar and easy-to-use Windows or Android OS.
With Zebra's family of fixed industrial scanners and machine vision technologies, you can tailor your solutions to your environment and applications.
Zebra’s line of kiosks can meet any self-service or digital signage need, from checking prices and stock on an in-aisle store kiosk to fully-featured kiosks that can be deployed on the wall, counter, desktop or floor in a retail store, hotel, airport check-in gate, physician’s office, local government office and more.
Discover Zebra’s range of accessories from chargers, communication cables to cases to help you customise your mobile device for optimal efficiency.
Zebra's environmental sensors monitor temperature-sensitive products, offering data insights on environmental conditions across industry applications.
Zebra's location technologies provide real-time tracking for your organisation to better manage and optimise your critical assets and create more efficient workflows.
Enhance frontline operations with Zebra’s AI software solutions, which optimize workflows, streamline processes, and simplify tasks for improved business outcomes.
Empower your frontline with Zebra Companion AI, offering instant, tailored insights and support to streamline operations and enhance productivity.
Boost productivity with Zebra Frontline AI Enablers: AI vision models, sample apps, and APIs streamline workflows for efficient business processes.
Zebra Frontline AI Blueprints deliver adaptable, real-world AI frameworks that automate manual tasks and drive efficiency in high-pressure frontline operations.
Zebra Workcloud, enterprise software solutions boost efficiency, cut costs, improve inventory management, simplify communication and optimize resources.
Keep labour costs low, your talent happy and your organisation compliant. Create an agile operation that can navigate unexpected schedule changes and customer demand to drive sales, satisfy customers and improve your bottom line.
Drive successful enterprise collaboration with prioritized task notifications and improved communication capabilities for easier team collaboration.
Get full visibility of your inventory and automatically pinpoint leaks across all channels.
Reduce uncertainty when you anticipate market volatility. Predict, plan and stay agile to align inventory with shifting demand.
Drive down costs while driving up employee, security, and network performance with software designed to enhance Zebra's wireless infrastructure and mobile solutions.
Explore Zebra’s printer software to integrate, manage and monitor printers easily, maximising IT resources and minimising down time.
Make the most of every stage of your scanning journey from deployment to optimisation. Zebra's barcode scanner software lets you keep devices current and adapt them to your business needs for a stronger ROI across the full lifecycle.
RFID development, demonstration and production software and utilities help you build and manage your RFID deployments more efficiently.
RFID development, demonstration and production software and utilities help you build and manage your RFID deployments more efficiently.
Zebra DNA is the industry’s broadest suite of enterprise software that delivers an ideal experience for all during the entire lifetime of every Zebra device.
Advance your digital transformation and execute your strategic plans with the help of the right location and tracking technology.
The Zebra Aurora suite of machine vision software enables users to solve their track-and-trace, vision inspection and industrial automation needs.
Zebra Aurora Focus brings a new level of simplicity to controlling enterprise-wide manufacturing and logistics automation solutions. With this powerful interface, it’s easy to set up, deploy and run Zebra’s Fixed Industrial Scanners and Machine Vision Smart Cameras, eliminating the need for different tools and reducing training and deployment time.
Aurora Imaging Library™, formerly Matrox Imaging Library, machine-vision software development kit (SDK) has a deep collection of tools for image capture, processing, analysis, annotation, display, and archiving. Code-level customisation starts here.
Aurora Design Assistant™, formerly Matrox Design Assistant, integrated development environment (IDE) is a flowchart-based platform for building machine vision applications, with templates to speed up development and bring solutions online quicker.
Designed for experienced programmers proficient in vision applications, Aurora Vision Library provides the same sophisticated functionality as our Aurora Vision Studio software but presented in programming language.
Aurora Vision Studio, an image processing software for machine & computer vision engineers, allows quick creation, integration & monitoring of powerful OEM vision applications.
Adding innovative tech is critical to your success, but it can be complex and disruptive. Professional Services help you accelerate adoption, and maximise productivity without affecting your workflows, business processes and finances.
Zebra's Managed Service delivers worry-free device management to ensure ultimate uptime for your Zebra Mobile Computers and Printers via dedicated experts.
Find ways you can contact Zebra Technologies’ Support, including Email and Chat, ask a technical question or initiate a Repair Request.
Zebra's Circular Economy Program helps you manage today’s challenges and plan for tomorrow with smart solutions that are good for your budget and the environment.
Important Update: Effective July 1, 2026, Zebra is implementing mandatory Multi-Factor Authentication (MFA) to enhance security. Learn more.
PHP2Shell Vulnerability (CVE-2026-109618 / CVE-2026-109619) – Zebra Customer Information
Zebra status
Zebra has assessed the services and applications it delivers to customers for exposure to the PHP2Shell vulnerabilities, and each has been confirmed as either already patched or not affected. Zebra has also identified its other systems affected by PHP2Shell and is actively applying patches, with patching of all impacted systems expected to be completed today, October 22, 2026. As a precaution, impacted web-facing systems have been taken offline and will remain offline until the patch has been applied.
Overview
On October 21, 2026, the PHP project released emergency security updates for two critical vulnerabilities in PHP, the open-source web scripting language. The flaws are tracked as CVE-2026-109618 and CVE-2026-109619 and are collectively called PHP2Shell.
Both flaws involve how PHP handles memory during web requests. They could allow an unauthenticated attacker to run code on a vulnerable web server. The PHP project rates both 9.2 out of 10 under CVSS 4.0 and states that updating is the only complete fix.
Technical details
CVE-2026-109618: out-of-memory handling
This flaw comes from how PHP responded when it ran out of memory. PHP used a mechanism called longjmp() to exit the current operation abruptly. In some cases, that exit left request data only partly initialized. PHP’s later shutdown process could then act on the invalid data, creating a path to remote code execution.
According to the PHP advisory, multipart form data can help trigger the condition. Examples include a request with many headers within one part, or many empty file fields that still cause PHP to create metadata.
Fix: PHP now delays a graceful out-of-memory error until a safe point instead of exiting abruptly. A separate hard limit handles more severe memory pressure.
CVE-2026-109619: stale state in long-running workers
This flaw involves stale global state in long-running PHP workers. A worker may keep a reference to memory from a request after PHP has freed that memory. If an error interrupts cleanup and a later request reaches that leftover state before it is reset, the worker may use invalid memory.
Because web workers handle requests one after another, state left by one request can affect a later one. The advisory’s confirmed paths involve fatal errors, error-reporting data, and session upload-progress handling. Confirmed cases include a mod_php scenario and a PHP-FPM path that depends on application behavior.
Whether a specific server is exposed depends on its PHP setup, configuration, application, and extensions. These factors do not reduce the urgency of patching.
Fix: PHP now resets a wider range of request-related global state, so a worker is less likely to carry invalid references between requests.
Updates and contact
This is an ongoing event. Zebra will continue to provide updates through your account team and our customer communication channels, and our support page will be updated as new information becomes available. Questions can be directed to productsecurity@zebra.com.
Sources
This information is intended for the recipient organization’s internal use only. It reflects Zebra’s understanding as of October 22, 2026, and may be updated.
Disclaimer: Zebra makes every attempt to release security updates on or about the time that Google releases its respective security bulletin. However, delivery time of security updates may vary depending on the region, product model, and third party software suppliers. Under some circumstances, the OS must be updated to the latest maintenance release prior to installing the security updates. Individual product updates will provide specific guidance.
Unless otherwise noted, there have been no reports of active customer exploitation or abuse from these newly reported issues.
Are you aware of a potential security issue with a Zebra Technologies product?
LifeGuard for Android
Compliance
Legal Terms of Use Privacy Policy Your Privacy Choices Supply Chain Transparency
The Zebra wordmark and logo are trademarks of Zebra Technologies Corp., registered in many jurisdictions worldwide. All other trademarks are the property of their respective owners. Some content or images may have been created with the assistance of AI. ©2026 Zebra Technologies Corp. and/or its affiliates.