ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
2026-10-22T19:23:40Z•fbbc027b1acf6a27db9eea7300709b08828231d656aa0cc2686559d56a6d876e
CVE-2026-109618CVE-2026-109619AI securityAutoCADCVSS 9.4DWGInfoCon YellowPHPSANS ISCVBAcritical vulnerabilitycryptominingproof-of-concept exploit
What happened
SANS Internet Storm Center feed highlighting a critical PHP vulnerability disclosure involving CVE-2026-109618 and CVE-2026-109619. The issue was rated CVSS 9.4, had early proof-of-concept exploits available before patch release, and prompted an InfoCon Yellow due to PHP’s widespread deployment. The feed also includes security content on malicious VBA projects in DWG files, cryptomining activity, and AI agent security.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- fbbc027b1acf6a27db9eea7300709b08828231d656aa0cc2686559d56a6d876e
- Enrichment time
- 2026-10-22T19:23:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.