PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
AWS ยท 2026-10-21
Actions
Technical Details
| Affected Versions | 8.5.0โ8.5.11, 8.4.0โ8.4.26, 8.3.0โ8.3.35, 8.2.0โ8.2.34, 5.4โ8.1 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-109618, CVE-2026-109619 |
| Deprecation Date | 2026-10-22 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update PHP runtimes to versions 8.5.12, 8.4.27, 8.3.36, or 8.2.35 to address critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), and apply interim configuration controls if immediate update is not feasible.
For Platform Teams
Deploy updated PHP packages and platform versions to ensure security compliance and protect against remote code execution vulnerabilities identified in CVE-2026-109618 and CVE-2026-109619.
For Executives
Implement immediate updates to PHP runtimes to mitigate critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could allow remote code execution and data access, ensuring application security and compliance.