---
title: "Pharos Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619"
slug: "pharos-response-to-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619"
updated: 2026-10-22T13:11:37Z
published: 2026-10-22T13:11:37Z
canonical: "kb.pharos.com/pharos-response-to-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.pharos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Pharos Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619

## Pharos Impact: None

Pharos has reviewed CVE-2026-109618 and CVE-2026-109619 and confirmed that Pharos products, including Pharos Cloud, Blueprint, and Uniprint, are unaffected.

No action is required for Pharos products as a result of this vulnerability.

## Product Impact

- **Pharos Cloud:** Not affected.
- **Blueprint:** Not affected.
- **Uniprint:** Not affected.

## Background

On October 21, 2026, the PHP project disclosed two critical vulnerabilities in the PHP core interpreter: CVE-2026-109618 and CVE-2026-109619. Pharos assessed the potential impact to our products and cloud infrastructure and confirmed that these vulnerabilities do not affect Pharos Cloud, Blueprint, or Uniprint.

Pharos will continue to monitor security advisories and update this notification if our assessment changes.

## Reference

- [PHP Security Advisories](https://www.php.net/index.php#2026-10-21-5)