SecureAuth Security Notice: PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619?

Version Affected: All

 

Overview

Are SecureAuth products affected by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619?
 

Answer

No. SecureAuth products do not use the PHP scripting language, so they are not affected by the Common Vulnerabilities and Exposures (CVE) entries CVE-2026-109618 and CVE-2026-109619.

SecureAuth's DevOps and Engineering teams reviewed these vulnerabilities and confirmed that PHP is not used in any SecureAuth image or code repository, and is not included in on-premises installations. This applies to cloud, hybrid, and on-premises deployments, so no patch or configuration change is needed.


 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.