Advanced Authentication: Assessment of CVE-2026-109618 and CVE-2026-109619

Products

• CA Advanced Authentication

Issue/Introduction

An assessment has been conducted for Advanced Authentication regarding Remote Code Execution (RCE) vulnerabilities in PHP, specifically CVE-2026-109618 and CVE-2026-109619.

Resolution

Advanced Authentication is not vulnerable to CVE-2026-109618 or CVE-2026-109619.

Key Details:

• No PHP Dependency: Advanced Authentication codebase does not utilize PHP.

• Risk Assessment: Because PHP is not integrated or present within the product architecture, these PHP-specific remote code execution vulnerabilities cannot be exploited against Advanced Authentication.

Contact Support

If you have any further questions or require additional assistance regarding product security, please reach out to Broadcom Support.