Pharos Impact: None
Pharos has reviewed CVE-2026-109618 and CVE-2026-109619 and confirmed that Pharos products, including Pharos Cloud, Blueprint, and Uniprint, are unaffected.
No action is required for Pharos products as a result of this vulnerability.
Product Impact
Pharos Cloud: Not affected.
Blueprint: Not affected.
Uniprint: Not affected.
Background
On October 21, 2026, the PHP project disclosed two critical vulnerabilities in the PHP core interpreter: CVE-2026-109618 and CVE-2026-109619. Pharos assessed the potential impact to our products and cloud infrastructure and confirmed that these vulnerabilities do not affect Pharos Cloud, Blueprint, or Uniprint.
Pharos will continue to monitor security advisories and update this notification if our assessment changes.