This KB article addresses inquiries regarding CA Service Desk Manager's (SDM) exposure to the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) detailed in CERT-EU Security Advisory 2026-018.
CA Service Desk Manager 17.x
CA Service Desk Manager (SDM) is NOT vulnerable to CVE-2026-109618 or CVE-2026-109619.
No patch, configuration update or mitigation steps are required for CA Service Desk Manager (SDM) regarding these PHP advisories.