PHP2Shell Vulnerabilities: CVE-2026-109618 and CVE-2026-109619 impact on Service Operations Insight (SOI)
Article ID: 460123
Updated On:
Products
Issue/Introduction
This advisory addresses customer and partner inquiries regarding SOI's exposure to the critical PHP2Shell Vulnerabilities CVE-2026-109618 and CVE-2026-109619 detailed in CERT-EU Security Advisory 2026-018.
Environment
Service Operations Insight 4.3
Resolution
None of the CA Service Operations Insight (SOI) components are affected by CVE-2026-109618 or CVE-2026-109619. CA SOI does not use or rely on PHP components in its architecture, so no action or patching is required.
Please note that PHP files located in directory paths such as C:\Program Files\CA\SOI\apache-activemq\examples\stomp\php (e.g., listener.php, publisher.php) are sample files included by third-party packages for demonstration purposes only. These example files are not executed or used by CA SOI in any capacity, do not introduce exposure to these vulnerabilities, and can be safely deleted.
Additional Information
Feedback
