Security Signal

← Cyber news feed

Confirmed 100ExploitedFirst seen 29 Oct 2026, 18:00 UTC

CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

Coverage

HeadlineSourceTypePublished
CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) Palo Alto Networks Security AdvisoriesOfficial29 Oct 2026, 23:54 UTC
Vulnerabilities in PHP Affecting Cisco Products: October 2026 Cisco Security AdvisoriesOfficial30 Oct 2026, 19:24 UTC
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) Unit 42Vendor research29 Oct 2026, 18:00 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-109618 Yes, since 26 Oct 2026 — —
CVE-2026-109619 Yes, since 26 Oct 2026 — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source90
Independent organisations reporting it (2)+5
Confirmed by an official source or CISA KEV+10
Confidence100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.