Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

Unit 42 threat intelligence covering critical and actively exploited vulnerabilities in PHP, PAN-OS, FortiManager/FortiGate, and NetScaler, alongside campaigns involving ransomware operators, espionage, credential theft, web shells, supply-chain compromise, cloud and Kubernetes identity risks, and AI-assisted cybercrime. The most urgent items are active exploitation of PAN-OS CVE-2026-0257, in-the-wild exploitation of NetScaler CVE-2026-88771 and CVE-2026-88772, and exploitation of FortiManager CVE-2024-47575 to deploy the PEERSTITCH implant.