PHP Vulnerabilities

This article explains the impact of PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 on Skills Workflow.

Impact Summary

On 21 October 2026, the PHP security team published alerts about two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may allow unauthorised remote code execution. PHP is widely used in web application development.

Skills Workflow is not affected by these vulnerabilities. Neither the application nor our internal systems use PHP, so there is no impact on the platform or its supporting infrastructure.

Mitigation

No mitigation is required for Skills Workflow in relation to these vulnerabilities. We continue to monitor new threats and maintain security measures to protect our services and customer data.

For more information about these vulnerabilities, see the official PHP website.