Skip to main content

"We've detected that you're visiting from {0}. Would you like to switch languages for tailored content?"

->

PHP Web Runtime Vulnerabilities

October 23, 2026

 

PHP Web Runtime Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) 

Solventum is aware of two recent publicly disclosed critical vulnerabilities affecting PHP web runtimes (CVE-2026-109618 and CVE-2026-109619) as well as reported exploitation activity associated with these vulnerabilities. Protecting the privacy, security and integrity of the data entrusted to Solventum is one of our highest priorities.  

Our response includes identifying affected systems, applying available security updates/patches, implementing appropriate risk-reduction measures, and monitoring for indicators of exploitation.  

We have identified certain systems that use PHP and are actively assessing the potential impact to our environment. At this time, we have found no evidence that the vulnerability has been used to gain unauthorized access. We are treating these vulnerabilities as critical in accordance with our cybersecurity vulnerability management processes.

We continue to assess potential impacts to Solventum-hosted applications and on-premises products, with no required customer action identified at this time. Solventum maintains layered security controls designed to help prevent, detect, and respond to cyber threats. We have also increased monitoring and vigilance in response to these vulnerabilities.  

If this assessment changes, we will provide updated guidance as appropriate.  

For current product information or assistance, customers may contact Solventum Support through the Solventum Contact Us page.

 

Additional Resources 

NIST National Vulnerability Database: CVE-2026-109618

NIST National Vulnerability Database: CVE-2026-109619