CISCO: 🔗 Reference: Cisco Security Advisory — Vulnerabilities in PHP Affecting Cisco Products: October 2026

CISCO Security Advisory

Published Date: Not specified

CVE: CVE-2026-109618

Advisory Summary

🗓️ Calendar October 22, 2026

🔶 🚨 Critical Security Update: PHP RCE impacting Cisco Ecosystem (PHP2shell)

• The PHP Foundation released Critical updates for two vulnerabilities that can lead to Remote Code Execution (RCE).
• Cisco is referencing these issues as “PHP2shell”, indicating high exploitability.

• CVE-2026-109618 — RCE via OOM corruption
• CVE-2026-109619 — RCE via stale global state

• PHP-based services (including integrations, web-facing management components, custom apps, or logging/monitoring stacks) may be at risk if running vulnerable PHP versions.
• RCE at Critical severity can enable attackers to:
• execute arbitrary commands,
• pivot to internal systems,
• exfiltrate credentials/data,
• and persist via web shells.

• restrict management/web access with allowlists/WAF rules,
• monitor for web shell behavior and suspicious PHP execution patterns,
• tighten file permissions and disable dangerous PHP functions if feasible.

• Cisco notes related tracking via Splunk product guidance for the same PHP CVEs.

###

-2026

Reference: Vendor Advisory