SSA-566435

Vulnerability from csaf_siemens - Published: 2026-10-23 00:00 - Updated: 2026-10-28 00:00
Summary
SSA-566435: PHP2Shell Vulnerabilities in Siemens Software Products
Notes
Summary: On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
CVE-2026-109618

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

CWE-416 - Use After Free
Affected products
Product Identifier Version Remediation
AX4
Siemens / AX4
 vers:all/*
Opcenter Connect MOM
Siemens / Opcenter Connect MOM
 vers:all/*
Opcenter Execution Core
Siemens / Opcenter Execution Core
 vers:all/*
Opcenter Execution Foundation
Siemens / Opcenter Execution Foundation
 vers:all/*
Opcenter Intelligence
Siemens / Opcenter Intelligence
 vers:all/*
Opcenter Intra Plant Logistics
Siemens / Opcenter Intra Plant Logistics
 vers:all/*
Opcenter Quality
Siemens / Opcenter Quality
 vers:all/*
Opcenter RDnL
Siemens / Opcenter RDnL
 vers:all/*
Opcenter X
Siemens / Opcenter X
 vers:all/*
PADS Pro Essentials
Siemens / PADS Pro Essentials
 vers:all/*
PADS Pro Student Edition
Siemens / PADS Pro Student Edition
 vers:all/*
CADRA
Siemens / CADRA
 vers:all/*
PADS Professional
Siemens / PADS Professional
 vers:all/*
PADS Professional - XCR
Siemens / PADS Professional - XCR
 vers:all/*
PADS Standard - XCR
Siemens / PADS Standard - XCR
 vers:all/*
PADS Standard & Standard Plus
Siemens / PADS Standard & Standard Plus
 vers:all/*
Polarion
Siemens / Polarion
 vers:all/*
QuadView
Siemens / QuadView
 vers:all/*
Simcenter Flomaster
Siemens / Simcenter Flomaster
 vers:all/*
Simcenter Flux
Siemens / Simcenter Flux
 vers:all/*
Simcenter Simlab
Siemens / Simcenter Simlab
 vers:all/*
Solid Edge
Siemens / Solid Edge
 vers:all/*
Capital
Siemens / Capital
 vers:all/*
Supply Chain Suite
Siemens / Supply Chain Suite
 vers:all/*
Teamcenter
Siemens / Teamcenter
 vers:all/*
Teamcenter Product Cost Management
Siemens / Teamcenter Product Cost Management
 vers:all/*
Teamcenter Visualization
Siemens / Teamcenter Visualization
 vers:all/*
Tecnomatix Plant Simulation
Siemens / Tecnomatix Plant Simulation
 vers:all/*
TestWay
Siemens / TestWay
 vers:all/*
Valor NPI
Siemens / Valor NPI
 vers:all/*
Xcargo
Siemens / Xcargo
 vers:all/*
Xpedition Designer
Siemens / Xpedition Designer
 vers:all/*
Xpedition Enterprise
Siemens / Xpedition Enterprise
 vers:all/*
Designcenter
Siemens / Designcenter
 vers:all/*
Xpedition Enterprise XCR
Siemens / Xpedition Enterprise XCR
 vers:all/*
Xpedition IC Packaging
Siemens / Xpedition IC Packaging
 vers:all/*
Xpedition Layout Browser
Siemens / Xpedition Layout Browser
 vers:all/*
Designcenter X
Siemens / Designcenter X
 vers:all/*
DFMExpress
Siemens / DFMExpress
 vers:all/*
HyperLynx
Siemens / HyperLynx
 vers:all/*
Insights Hub
Siemens / Insights Hub
 vers:all/*
Opcenter Connect Electronics
Siemens / Opcenter Connect Electronics
 vers:all/*
Threats
Impact PHP is not present in this product
Impact Simcenter Flomaster is not affected by the PHP issue
CVE-2026-109619

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

CWE-416 - Use After Free
Affected products
Known not affected 42 products, the same list as for CVE-2026-109618
Threats
Impact PHP is not present in this product
Impact Simcenter Flomaster is not affected by the PHP issue
References
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as \"php2shell\" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-566435: PHP2Shell Vulnerabilities in Siemens Software Products - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-566435.html"
      },
      {
        "category": "self",
        "summary": "SSA-566435: PHP2Shell Vulnerabilities in Siemens Software Products - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-566435.json"
      }
    ],
    "title": "SSA-566435: PHP2Shell Vulnerabilities in Siemens Software Products",
    "tracking": {
      "current_release_date": "2026-10-28T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-566435",
      "initial_release_date": "2026-10-23T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-10-23T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2026-10-26T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added Valor NPI, Solid Edge and Capital to \"Known Not Affected Product\" list"
        },
        {
          "date": "2026-10-27T00:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added Insights Hub, Simcenter Flux and Simcenter Simlab"
        },
        {
          "date": "2026-10-28T00:00:00.000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added Opcenter Execution Foundation, Opcenter Quality, Opcenter Intelligence, Opcenter RDnL, AX4, Supply Chain Suite, Opcenter Intra Plant Logistics, Opcenter Connect Electronics, Xcargo, Designcenter and Designcenter X"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "AX4",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "AX4"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "CADRA",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "CADRA"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Capital",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "Capital"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Designcenter",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "Designcenter"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Designcenter X",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "Designcenter X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "DFMExpress",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "DFMExpress"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "HyperLynx",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "HyperLynx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Insights Hub",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "Insights Hub"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Connect Electronics",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Connect Electronics"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Connect MOM",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Connect MOM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Core",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Core"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Foundation",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Foundation"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Intelligence",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Intelligence"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Intra Plant Logistics",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Intra Plant Logistics"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Quality",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Quality"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter RDnL",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter RDnL"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter X",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Pro Essentials",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Pro Essentials"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Pro Student Edition",
                  "product_id": "19"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Pro Student Edition"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Professional",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Professional"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Professional - XCR",
                  "product_id": "21"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Professional - XCR"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Standard - XCR",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Standard - XCR"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Standard \u0026 Standard Plus",
                  "product_id": "23"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Standard \u0026 Standard Plus"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Polarion",
                  "product_id": "24"
                }
              }
            ],
            "category": "product_name",
            "name": "Polarion"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "QuadView",
                  "product_id": "25"
                }
              }
            ],
            "category": "product_name",
            "name": "QuadView"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Simcenter Flomaster",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "Simcenter Flomaster"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Simcenter Flux",
                  "product_id": "27"
                }
              }
            ],
            "category": "product_name",
            "name": "Simcenter Flux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Simcenter Simlab",
                  "product_id": "28"
                }
              }
            ],
            "category": "product_name",
            "name": "Simcenter Simlab"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Solid Edge",
                  "product_id": "29"
                }
              }
            ],
            "category": "product_name",
            "name": "Solid Edge"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Supply Chain Suite",
                  "product_id": "30"
                }
              }
            ],
            "category": "product_name",
            "name": "Supply Chain Suite"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter",
                  "product_id": "31"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter Product Cost Management",
                  "product_id": "32"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter Product Cost Management"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter Visualization",
                  "product_id": "33"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter Visualization"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Tecnomatix Plant Simulation",
                  "product_id": "34"
                }
              }
            ],
            "category": "product_name",
            "name": "Tecnomatix Plant Simulation"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "TestWay",
                  "product_id": "35"
                }
              }
            ],
            "category": "product_name",
            "name": "TestWay"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Valor NPI",
                  "product_id": "36"
                }
              }
            ],
            "category": "product_name",
            "name": "Valor NPI"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xcargo",
                  "product_id": "37"
                }
              }
            ],
            "category": "product_name",
            "name": "Xcargo"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition Designer",
                  "product_id": "38"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition Designer"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition Enterprise",
                  "product_id": "39"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition Enterprise XCR",
                  "product_id": "40"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition Enterprise XCR"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition IC Packaging",
                  "product_id": "41"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition IC Packaging"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition Layout Browser",
                  "product_id": "42"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition Layout Browser"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-109618",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "flags": [
        {
          "label": "component_not_present",
          "product_ids": [
            "22",
            "29",
            "16",
            "2",
            "33",
            "7",
            "42",
            "25",
            "21",
            "37",
            "18",
            "5",
            "19",
            "36",
            "4",
            "8",
            "35",
            "14",
            "30",
            "40",
            "34",
            "11",
            "23",
            "28",
            "1",
            "10",
            "17",
            "3",
            "20",
            "24",
            "15",
            "12",
            "26",
            "6",
            "39",
            "41",
            "27",
            "32",
            "38",
            "9",
            "13",
            "31"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "1",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "2",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "3",
          "30",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "37",
          "38",
          "39",
          "4",
          "40",
          "41",
          "42",
          "5",
          "6",
          "7",
          "8",
          "9"
        ]
      },
      "threats": [
        {
          "category": "impact",
          "details": "PHP is not present in this product",
          "product_ids": [
            "22",
            "29",
            "16",
            "2",
            "33",
            "7",
            "42",
            "25",
            "21",
            "37",
            "18",
            "5",
            "19",
            "36",
            "4",
            "8",
            "35",
            "14",
            "30",
            "40",
            "34",
            "11",
            "23",
            "28",
            "1",
            "10",
            "17",
            "3",
            "20",
            "24",
            "15",
            "12",
            "6",
            "39",
            "41",
            "27",
            "32",
            "38",
            "9",
            "13",
            "31"
          ]
        },
        {
          "category": "impact",
          "details": "Simcenter Flomaster is not affected by the PHP issue",
          "product_ids": [
            "26"
          ]
        }
      ],
      "title": "CVE-2026-109618"
    },
    {
      "cve": "CVE-2026-109619",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "flags": [
        {
          "label": "component_not_present",
          "product_ids": [
            "22",
            "29",
            "16",
            "2",
            "33",
            "7",
            "42",
            "25",
            "21",
            "37",
            "18",
            "5",
            "19",
            "36",
            "4",
            "8",
            "35",
            "14",
            "30",
            "40",
            "34",
            "11",
            "23",
            "28",
            "1",
            "10",
            "17",
            "3",
            "20",
            "24",
            "15",
            "12",
            "26",
            "6",
            "39",
            "41",
            "27",
            "32",
            "38",
            "9",
            "13",
            "31"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "1",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "2",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "3",
          "30",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "37",
          "38",
          "39",
          "4",
          "40",
          "41",
          "42",
          "5",
          "6",
          "7",
          "8",
          "9"
        ]
      },
      "threats": [
        {
          "category": "impact",
          "details": "PHP is not present in this product",
          "product_ids": [
            "22",
            "29",
            "16",
            "2",
            "33",
            "7",
            "42",
            "25",
            "21",
            "37",
            "18",
            "5",
            "19",
            "36",
            "4",
            "8",
            "35",
            "14",
            "30",
            "40",
            "34",
            "11",
            "23",
            "28",
            "1",
            "10",
            "17",
            "3",
            "20",
            "24",
            "15",
            "12",
            "6",
            "39",
            "41",
            "27",
            "32",
            "38",
            "9",
            "13",
            "31"
          ]
        },
        {
          "category": "impact",
          "details": "Simcenter Flomaster is not affected by the PHP issue",
          "product_ids": [
            "26"
          ]
        }
      ],
      "title": "CVE-2026-109619"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.