PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

/ by

Last updated: 23 October 2026

Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have been disclosed in PHP which, under certain conditions, may allow unauthenticated remote code execution.

Canon Production Printing has assessed its own product and service portfolio identified as potentially affected and has not identified an impact.

Assessment of certain third-party/OEM software provided in connection with Canon Production Printing solutions is continuing.  Where relevant customer action is identified, further information will be provided.