Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
cisco-sa-notice-I8z3n6lK
Summary
On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities:
CVE-2026-109618 - RCE via OOM corruption
CVE-2026-109619 - RCE via stale global state
For information about these vulnerabilities, see the advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. These vulnerabilities are being referenced as PHP2shell.
For information about Splunk products and offerings, see Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026.
Important: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability.
This advisory will be updated as additional information becomes available.
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Any workarounds for a specific Cisco product or service are documented in the relevant Cisco bugs, which are identified in the Vulnerable Products section of this advisory.
For information about fixed software releases, consult the Cisco bugs identified in the Vulnerable Products section of this advisory.
When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page, to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
CVEs in this advisory 2
Updates
- Published by Cisco
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.