Critical security issue affecting PHP
2026-10-21T20:52:10Z•62935b3a6c8a07c97c7b9b3c076086dd751610590d7223097385e00572213068
CVE-2026-109618CVE-2026-109619CHOSEN BRICKChina-linked threat actorsCitrix NetScaler ADCCitrix NetScaler GatewayIranian threat actorsPHPTLSUK NCSCactive exploitationagentic AIcritical vulnerabilitycyber resilienceedge devicesoperational technologypost-quantum cryptographyspyware
What happened
UK NCSC advisory feed highlighting a critical PHP security issue involving CVE-2026-109618 and CVE-2026-109619, with immediate mitigation urged for UK organisations. The feed also reports active exploitation of Citrix NetScaler ADC/Gateway vulnerabilities, China-linked and Iranian state-sponsored targeting, CHOSEN BRICK spyware, disruptive activity against exposed systems and edge devices, and guidance on TLS, post-quantum cryptography, AI security, and cyber resilience.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 62935b3a6c8a07c97c7b9b3c076086dd751610590d7223097385e00572213068
- Enrichment time
- 2026-10-21T20:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.