Vulnerabilities in PHP Affecting Cisco Products: October 2026

Vulnerabilities in PHP Affecting Cisco Products: October 2026

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page us/security-vendor/cisco/sa-php-october26, snapshot 20261022T191727Z. Copied byte for byte; every file's sha256 is in captures/20261022T191727Z/provenance.json. Publisher: Cisco. Language: en. URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq

What the page says

_Curator's reading of the capture._

Cisco security advisory cisco-sa-php-october26-Jj384Daq, "Vulnerabilities in PHP Affecting Cisco Products: October 2026" (version 1.2, interim, 2026-OCT-22). It references the PHP Foundation's release of 21 October and GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. Cisco is investigating; products under active investigation include Catalyst Center, Ultra Cloud Core - Converged Policy and Charging, Ultra-Reliable Wireless Backhaul, Unified Industrial Wireless Software, AppDynamics On-Premises Secure Application, Security Cloud Control and Vulnerability Management. Currently no products are known to be affected; AI Defense (hybrid on-prem), Ultra Cloud Core PCF and Subscriber Microservices Infrastructure are confirmed not affected. No workarounds. "The Cisco PSIRT is not aware of any malicious use of the vulnerabilities."

Why it is here

From the promotion queue (index/promote.json, priority 2): Cisco investigation and product status (primary)

Supports: cyber desk: appliances

Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.