Critical security issue affecting PHP
2026-10-22T20:52:09Z•77c03e178bee15d36170e767af03bf461b343b8d02baef3a7e5b5b187a3f74df
CVE-2026-109618CVE-2026-109619AI securityCHOSEN BRICKChina-linked threat actorsCitrix NetScalerIranian cyber activityPHPactive exploitationcritical vulnerabilityedge devicesinternet-exposed systemsspywarevulnerability mitigation
What happened
The UK NCSC urges organisations to take immediate action against critical PHP security issues CVE-2026-109618 and CVE-2026-109619. The broader feed also highlights actively exploited Citrix NetScaler vulnerabilities, state-linked targeting, spyware, internet-exposed systems, and emerging AI security risks.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- uk_ncsc_all_rss
- Record identifier
- 77c03e178bee15d36170e767af03bf461b343b8d02baef3a7e5b5b187a3f74df
- Enrichment time
- 2026-10-22T20:52:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.