CVE-2026-109618 and CVE-2026-109519 is related to potential remote code execution (RCE) in PHP.
This assessment addresses customer and partner inquiries regarding Symantec Email Security.cloud exposure to the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Email Security.cloud
Symantec Email Security.cloud is not vulnerable to CVE-2026-109618 or CVE-2026-109619 and does not use PHP in any capacity.