PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 impact on App Control

Products

• Carbon Black App Control

Issue/Introduction

Is the App Control Server impacted by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619?

Environment

App Control Server: All Supported Versions

Resolution

The official Broadcom security advisory has been published.

App Control Server builds 8.12.2 and 8.13.2 with an updated PHP version included are now available.

Please create a support case to request them. The new versions will also be published on the Broadcom Support Portal shortly.

Additional Information

Upgrading to version 8.12.2 is optional, and upgrading to the latest 8.13.2 is recommended.