# Source: Vulnerabilities in PHP Affecting Cisco Products: October 2026

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Cisco: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · vendor · primary · captured

# Vulnerabilities in PHP Affecting Cisco Products: October 2026

**Cisco** · [https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq) · published not stated · added by `curator@php.newsroom` · slug `cisco-sa-php-october26`

Promoted from the source watch (oq9gflln), snapshot 20261022T191727Z. Cisco investigation and product status (primary)

## What it says, as the collector read it

#### Vulnerabilities in PHP Affecting Cisco Products: October 2026

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`), page `us/security-vendor/cisco/sa-php-october26`, snapshot `20261022T191727Z`. Copied byte for byte; every file's sha256 is in `captures/20261022T191727Z/provenance.json`. Publisher: Cisco. Language: en. URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq

#### What the page says

_Curator's reading of the capture._

Cisco security advisory cisco-sa-php-october26-Jj384Daq, "Vulnerabilities in PHP Affecting Cisco Products: October 2026" (version 1.2, interim, 2026-OCT-22). It references the PHP Foundation's release of 21 October and GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp. Cisco is investigating; products under active investigation include Catalyst Center, Ultra Cloud Core - Converged Policy and Charging, Ultra-Reliable Wireless Backhaul, Unified Industrial Wireless Software, AppDynamics On-Premises Secure Application, Security Cloud Control and Vulnerability Management. Currently no products are known to be affected; AI Defense (hybrid on-prem), Ultra Cloud Core PCF and Subscriber Microservices Infrastructure are confirmed not affected. No workarounds. "The Cisco PSIRT is not aware of any malicious use of the vulnerabilities."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): Cisco investigation and product status (primary)

Supports: cyber desk: appliances

#### Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T191727Z · HTTP 200 · https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq- `headers.json` 9284c87155511b2c471216e2096bb1e32f5357928e3cd57fc8d43df4a07370bb 2,545 bytes
- `page.html` d5ac143be2171987bc719cac0f05a076fabe7a2d7943168014ff0d7ee05000d4 228,863 bytes
- `provenance.json` 5723badb3711c11909083e6771ff8d1b43cf871797a07e8ba2b3784f6c0e2dbd 1,694 bytes
- `rendered.html` 1cd58949d6a33eb4802ef0dbff15bd15ce7471bccfba710d79c9c5b9fca98b50 886,276 bytes
- `screenshot.jpg` 817ee2282f96dd868da4716cb46c821f57699aded67586674bbaf16363355b97 396,794 bytes
- `text.txt` a8149d16b8912fdf12a0d16895c2c484226ca5744e048033c39c1f8d8d1e9cdb 7,868 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/sources/cisco-sa-php-october26/index.html