PHP Vulnerabilities and Carbon Black App Control Server

Products

• Carbon Black App Control

Issue/Introduction

A vulnerability scanner identifies multiple PHP-related vulnerabilities on the Carbon Black App Control (CBAC) server 8.11. The scanner flags the following files as susceptible:

• C:\Program Files (x86)\Bit9\Parity Console\php\php.exe
• C:\Program Files (x86)\Bit9\Parity Console\php\php-cgi.exe

These files are typically reported as version 8.3.24.

Environment

CBAC 8.11

Resolution

CBAC version 8.11 is not vulnerable to any of the reported PHP vulnerabilities listed below:

CVE-2025-1217
CVE-2024-11235
CVE-2026-7261
CVE-2025-1220
CVE-2025-14180
CVE-2026-6735
CVE-2025-14177
CVE-2025-1736
CVE-2025-6491
CVE-2026-7259
CVE-2025-14178
CVE-2025-1734
CVE-2026-7262
CVE-2026-7258
CVE-2025-14179
CVE-2025-1735
CVE-2026-7568