{"id":4610,"date":"2026-10-23T06:35:36","date_gmt":"2026-10-23T06:35:36","guid":{"rendered":"https:\/\/sparrowcloud.ai\/en\/?post_type=notice&p=4610"},"modified":"2026-10-23T06:39:09","modified_gmt":"2026-10-23T06:39:09","slug":"php-security-vulnerability-advisory","status":"publish","type":"notice","link":"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/","title":{"rendered":"[Notice] PHP Security Vulnerability Advisory"},"content":{"rendered":"

Hello from Sparrow Cloud.<\/p>\n

Two security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have recently been disclosed in PHP, a programming language widely used to build websites.<\/p>\n

These vulnerabilities may pose serious security risks to PHP-based servers and application environments. Users are advised to promptly check for affected versions and apply the relevant security updates.<\/p>\n

 <\/p>\n

Overview<\/h1>\n

CVE IDs: CVE-2026-109618 and CVE-2026-109619
\nPrimary risks: Successful exploitation may allow an unauthenticated attacker to execute code remotely (RCE) and disclose sensitive information.
\nSeverity: Critical (CVSS v4.0 score: 9.2 for both vulnerabilities)<\/p>\n

Affected and fixed versions are the same for both vulnerabilities.<\/p>\n\n\n\n\n\n\n\n
Product<\/td>\nAffected versions<\/td>\nFixed versions<\/td>\n<\/tr>\n
PHP 8.2<\/td>\nEarlier than 8.2.35<\/td>\n8.2.35 or later<\/td>\n<\/tr>\n
PHP 8.3<\/td>\nEarlier than 8.3.36<\/td>\n8.3.36 or later<\/td>\n<\/tr>\n
PHP 8.4<\/td>\nEarlier than 8.4.27<\/td>\n8.4.27 or later<\/td>\n<\/tr>\n
PHP 8.5<\/td>\nEarlier than 8.5.12<\/td>\n8.5.12 or later<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Note: PHP 8.1 and earlier have reached the end of official security support. Users are advised to upgrade to a supported version.
\nReference: KISA \u2013 PHP Product Security Update Advisory.<\/p>\n

 <\/p>\n

 <\/p>\n

Recommended Actions<\/h1>\n

Check your environment
\nConfirm whether PHP is installed, identify the versions in use, and determine whether any affected versions are deployed.<\/p>\n

Apply security updates (see the table above)
\nFor PHP 8.2, 8.3, 8.4, and 8.5, apply the security update for the corresponding version branch.
\nFor PHP 8.1 and earlier, upgrade to a supported version<\/p>\n

 <\/p>\n

 <\/p>\n

Identifying Vulnerable Components in Sparrow Cloud<\/h1>\n

Sparrow Open Source (SCA) supports automated detection of these vulnerabilities and helps you identify affected components.<\/p>\n

These vulnerabilities may allow an unauthenticated remote attacker to execute arbitrary code on affected servers. Prompt assessment and patching are essential.<\/p>\n

Sparrow Cloud is committed to helping you minimize the risk posed by these vulnerabilities and maintain secure, stable service operations.<\/p>\n

If you have any questions, please contact our Customer Support team.
\nTechnical Support \/ Service Issues: +82-2-6263-7400<\/p>\n","protected":false},"featured_media":0,"template":"","categories":[],"class_list":["post-4610","notice","type-notice","status-publish","hentry"],"acf":[],"yoast_head":"\n[Notice] PHP Security Vulnerability Advisory - Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"[Notice] PHP Security Vulnerability Advisory - Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud\" \/>\n<meta property=\"og:description\" content=\"Hello from Sparrow Cloud. Two security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have recently been disclosed in PHP, a programming language widely used to build websites. These vulnerabilities may pose serious security risks to PHP-based servers and application environments. Users are advised to promptly check for affected versions and apply the relevant security updates.   Overview CVE […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/\" \/>\n<meta property=\"og:site_name\" content=\"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-23T06:39:09+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/notice\\\/php-security-vulnerability-advisory\\\/\",\"url\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/notice\\\/php-security-vulnerability-advisory\\\/\",\"name\":\"[Notice] PHP Security Vulnerability Advisory - Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/#website\"},\"datePublished\":\"2026-10-23T06:35:36+00:00\",\"dateModified\":\"2026-10-23T06:39:09+00:00\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/notice\\\/php-security-vulnerability-advisory\\\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/\",\"name\":\"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/#organization\",\"name\":\"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud\",\"url\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2023\\\/12\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/12\\\/2023\\\/12\\\/logo.png\",\"width\":169,\"height\":24,\"caption\":\"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud\"},\"image\":{\"@id\":\"https:\\\/\\\/sparrowcloud.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"[Notice] PHP Security Vulnerability Advisory - Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/","og_locale":"en_US","og_type":"article","og_title":"[Notice] PHP Security Vulnerability Advisory - Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud","og_description":"Hello from Sparrow Cloud. Two security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have recently been disclosed in PHP, a programming language widely used to build websites. These vulnerabilities may pose serious security risks to PHP-based servers and application environments. Users are advised to promptly check for affected versions and apply the relevant security updates.   Overview CVE […]","og_url":"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/","og_site_name":"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud","article_modified_time":"2026-10-23T06:39:09+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/","url":"https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/","name":"[Notice] PHP Security Vulnerability Advisory - Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud","isPartOf":{"@id":"https:\/\/sparrowcloud.ai\/en\/#website"},"datePublished":"2026-10-23T06:35:36+00:00","dateModified":"2026-10-23T06:39:09+00:00","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sparrowcloud.ai\/en\/notice\/php-security-vulnerability-advisory\/"]}]},{"@type":"WebSite","@id":"https:\/\/sparrowcloud.ai\/en\/#website","url":"https:\/\/sparrowcloud.ai\/en\/","name":"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud","description":"","publisher":{"@id":"https:\/\/sparrowcloud.ai\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sparrowcloud.ai\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/sparrowcloud.ai\/en\/#organization","name":"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud","url":"https:\/\/sparrowcloud.ai\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sparrowcloud.ai\/en\/#\/schema\/logo\/image\/","url":"https:\/\/sparrowcloud.ai\/en\/wp-content\/uploads\/sites\/12\/2023\/12\/logo.png","contentUrl":"https:\/\/sparrowcloud.ai\/en\/wp-content\/uploads\/sites\/12\/2023\/12\/logo.png","width":169,"height":24,"caption":"Cloud based Static & Dynamic Application Security Testing | Sparrow Cloud"},"image":{"@id":"https:\/\/sparrowcloud.ai\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/sparrowcloud.ai\/en\/wp-json\/wp\/v2\/notice\/4610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sparrowcloud.ai\/en\/wp-json\/wp\/v2\/notice"}],"about":[{"href":"https:\/\/sparrowcloud.ai\/en\/wp-json\/wp\/v2\/types\/notice"}],"wp:attachment":[{"href":"https:\/\/sparrowcloud.ai\/en\/wp-json\/wp\/v2\/media?parent=4610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sparrowcloud.ai\/en\/wp-json\/wp\/v2\/categories?post=4610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}