ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)

2026-10-22T13:23:41Z•60485a596d85d4dd3fb6831b70d9e994ccaa72a3a78fd9dbc5c50f3c6fc24b98

CVE-2026-109618CVE-2026-109619AutoCADDWGPHPPanchanSANS-ISCVBAactive-exploitation-riskcritical-vulnerabilitycryptominingproof-of-concept-exploit

Open source link →

What happened

SANS ISC reported two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, with an expected CVSS score of 9.4 and early proof-of-concept exploits available before patches were released. Due to PHP's widespread deployment and active exploit availability, ISC raised its threat level to INFOCON Yellow. The feed also includes content on malicious VBA projects embedded in DWG files and Panchan cryptomining activity.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: 60485a596d85d4dd3fb6831b70d9e994ccaa72a3a78fd9dbc5c50f3c6fc24b98
Enrichment time: 2026-10-22T13:23:41Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records