Advisory regarding PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 for Symantec SiteMinder.

Products

• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

Is Symantec SiteMinder affected by the recent PHP security vulnerabilities identified under CVE-2026-109618 and CVE-2026-109619?

Environment

Product: Symantec SiteMinder
Versions: All versions

Resolution

It has been verified that Symantec SiteMinder is not vulnerable to the mentioned vulnerabilities. None of its product components are impacted by these CVEs.

Symantec SiteMinder does not incorporate or utilize on PHP2Shell across any of its components, and no action is required by customers.

Additional Information

IMS Advisory for PHP2shell Vulnerabilities:

 

CVE-2026-109618 Detail:

 

CVE-2026-109619 Detail: