Critical security issue affecting PHP
2026-10-26T20:52:08Z•41e59ff3a215e5d7c76852a19b6be4bed337bb07804a4d8b30064a2cd291d25c
CVE-2026-109618CVE-2026-109619CHOSEN BRICKChina-linked actorsCitrix NetScalerIran-linked actorsPHPTLSUK NCSCactive exploitationadversary simulationagentic AIcyber resilienceinternet-exposed systemsoperational technologypost-quantum cryptographyshadow AIspywarevulnerability management
What happened
UK NCSC RSS items covering a critical PHP security issue involving CVE-2026-109618 and CVE-2026-109619, actively exploited Citrix NetScaler ADC/Gateway vulnerabilities, state-linked cyber targeting and spyware, disruptive activity against internet-exposed systems and OT, and guidance on TLS, AI security, adversary simulation, and resilient connectivity. The most urgent items concern immediate PHP mitigation and active exploitation of Citrix vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 41e59ff3a215e5d7c76852a19b6be4bed337bb07804a4d8b30064a2cd291d25c
- Enrichment time
- 2026-10-26T20:52:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.