Application Synthetic Monitor (ASM) and CVE-2026-109618 & CVE-2026-109619
search cancel

Application Synthetic Monitor (ASM) and CVE-2026-109618 & CVE-2026-109619

book

Article ID: 460268

calendar_today

Updated On:

Products

CA App Synthetic Monitor

Issue/Introduction

PHP2Shell: Critical Core PHP Unauthenticated Remote Code Execution Vulnerabilities  CVE-2026-109618: PHP OOM Request Parsing Memory Corruption and Unauthenticated RCE and CVE-2026-109619: PHP Worker State Persistence Use-After-Free and Unauthenticated RCE

Environment

  • Application Synthetic Monitor (ASM)
  • Application Synthetic Monitor SaaS (ASM SaaS) 

Resolution

  • ASM Core and public stations are not vulnerable
  • Customers with old OPMS (version < 26.8.x) should update to 26.8.4 or higher. For OPMS upgrade process refer to Techdocs OPMS upgrade

Additional Information

Powered by Wolken Software