Critical security issue affecting PHP
2026-10-23T20:52:09Z•06ba9e54682b651f2261dd9c12d0264352d3b35482d4310a220cd18af1498530
CVE-2026-109618CVE-2026-109619AI securityCHOSEN BRICKChina-linked actorsCitrix NetScalerIranian state actorsPHPTLSUK NCSCactive exploitationcritical vulnerabilityedge devicesoperational technologypost-quantum cryptographysecurity advisoriesspyware
What happened
UK NCSC RSS feed containing multiple security advisories and guidance items. The most urgent entries concern a critical PHP security issue involving CVE-2026-109618 and CVE-2026-109619, actively exploited Citrix NetScaler ADC/Gateway vulnerabilities, China-linked targeting of sensitive data, Iranian state-linked CHOSEN BRICK spyware, and disruptive activity against internet-exposed systems and edge devices.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 06ba9e54682b651f2261dd9c12d0264352d3b35482d4310a220cd18af1498530
- Enrichment time
- 2026-10-23T20:52:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.