CA Harvest Software Change Manager: Assessment for PHP Remote Code Execution Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
search cancel

CA Harvest Software Change Manager: Assessment for PHP Remote Code Execution Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

book

Article ID: 460103

calendar_today

Updated On:

Products

CA Harvest Software Change Manager CA Harvest Software Change Manager - OpenMake Meister

Issue/Introduction

This KB article addresses inquiries regarding CA Harvest Change Manager's (SCM) exposure to the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) detailed in CERT-EU Security Advisory 2026-018.

Environment

CA Harvest Change Manager - All Versions

Resolution

CA Harvest Software Change Manager (SCM) is NOT vulnerable to CVE-2026-109618 or CVE-2026-109619.

No patch, configuration update or mitigation steps are required for CA Harvest Software Change Manager regarding these PHP advisories.