This KB article addresses inquiries regarding CA Harvest Change Manager's (SCM) exposure to the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) detailed in CERT-EU Security Advisory 2026-018.
CA Harvest Change Manager - All Versions
CA Harvest Software Change Manager (SCM) is NOT vulnerable to CVE-2026-109618 or CVE-2026-109619.
No patch, configuration update or mitigation steps are required for CA Harvest Software Change Manager regarding these PHP advisories.