CA Client Automation: Assessment for PHP Remote Code Execution Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Products

• CA Client Automation
• CA Client Automation - Asset Management
• CA Client Automation - IT Client Manager
• CA Client Automation - Remote Control
• CA Client Automation - Software Delivery

Issue/Introduction

This KB article addresses inquiries regarding CA Client Automation's exposure to the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) detailed in CERT-EU Security Advisory 2026-018.

Environment

CA Client Automation - All Versions

Resolution

CA Client Automation is NOT vulnerable to CVE-2026-109618 or CVE-2026-109619.

No patch, configuration update or mitigation steps are required for CA Client Automation regarding these PHP advisories.