This page covers the Admina service that Money Forward i develops and operates. For external services that Admina uses and for services that Admina integrates with, see Scope of impact.
Listed vulnerabilities
PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Checked: 2026-10-21 The Admina service does not use PHP, so these vulnerabilities do not affect it.What we checked
We checked the Admina source code and the monitoring data of the production environment. We found no PHP programs, runtimes, or libraries.Scope of impact
FAQ
Do I need to take action in Admina if an integrated service is affected?
Do I need to take action in Admina if an integrated service is affected?
Admina operates integrated services through their APIs and other means. PHP does not run inside Admina, so Admina itself is not affected.However, if attackers exploit the vulnerability in the integrated service, the credentials used for the integration may be exposed. These include API keys and the ID and password of the integration account. Take action if the provider reports an impact, or if you find unauthorized access on a server that you run. Reissue the API key or change the password in the integrated service, then re-link the integration in Admina. Disable the old API key in the integrated service.