ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
2026-10-22T07:23:42Z•5e17d960934683a3ff9bef2e98237279449fc8cf8550ac28e5c2fa0232cd96e9
CVE-2026-109618CVE-2026-109619AI-securityAutoCADDWGInfoCon-YellowPHPPanchanVBAcritical-vulnerabilitycryptominingearly-proof-of-conceptpublic-exploitweb-application-security
What happened
SANS ISC reported two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, with an estimated CVSS score of 9.4 and early proof-of-concept exploits available before vendor patch release. Due to PHP's widespread deployment and active exploit development, the incident was elevated to InfoCon Yellow. The feed also includes content on malicious or suspicious VBA projects embedded in DWG files, cryptomining activity associated with Panchan, and AI-agent security, but the PHP vulnerabilities are the primary high-impact issue.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 5e17d960934683a3ff9bef2e98237279449fc8cf8550ac28e5c2fa0232cd96e9
- Enrichment time
- 2026-10-22T07:23:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.