vulnerability
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
Medium
Summary
Palo Alto Unit 42 has identified two critical remote code execution (RCE) vulnerabilities in PHP – CVE-2026-109618 and CVE-2026-109619. Palo Alto Networks customers are protected through various product updates and threat intelligence services, and are advised to immediately assess their exposure and patch affected systems.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 4 other source(s)
- Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)
- Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
- Palo Alto's firewall OS has been under attack from multiple ransomware groups since June