CA Service Catalog: Assessment for PHP Remote Code Execution Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Article ID: 460097
Updated On:
Products
CA Service Catalog
Issue/Introduction
This KB article addresses inquiries regarding CA Service Catalog's exposure to the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) detailed in CERT-EU Security Advisory 2026-018.
Environment
CA Service Catalog 17.x
Resolution
CA Service Catalog is NOT vulnerable to CVE-2026-109618 or CVE-2026-109619.
No patch, configuration update or mitigation steps are required for CA Service Catalog regarding these PHP advisories.
Feedback
Yes
No
Powered by
