We are continuing to monitor for any further issues.
Posted Oct 23, 2026 - 15:54 EDT
Update
We are continuing to monitor for any further issues.
Posted Oct 23, 2026 - 15:03 EDT
Monitoring
Microsoft is aware of and actively monitoring the PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and related activity. Based on the information currently available, Microsoft has found no evidence that these vulnerabilities have been exploited in connection with the following Microsoft-operated and developed systems:
• Dragon Medical One • DAX Copilot • Dragon Copilot
Posted Oct 23, 2026 - 15:01 EDT
This incident affects: DAX Copilot Mobile (DAX Copilot Mobile - Login (US-01), DAX Copilot Mobile - Login (US-02), DAX Copilot Mobile - Login (US-03)), DAX Copilot for DMO (DAX Copilot for DMO - Login (US-01), DAX Copilot for DMO - Login (US-02), DAX Copilot for DMO - Login (US-03)), Dragon Medical One (Dragon Medical One - Login (United States), Dragon Medical One - Login (Canada)), and DAX Copilot for Epic (DAX Copilot for Epic - Audio Recording (US-01), DAX Copilot for Epic - Audio Recording (US-02), DAX Copilot for Epic - Audio Recording (US-03)).
