Vulnerabilities in PHP Affecting Cisco Products: October 2026

SecurityVulns
Yanac

On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: 

CVE-2026-109618 – RCE via OOM corruption
CVE-2026-109619 – RCE via stale global state

For information about these vulnerabilities, see the advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. These vulnerabilities are being referenced as PHP2shell.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq

<br/>Security Impact Rating: CriticalCisco Security AdvisoryRead More