Update on PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

ManageEngine has addressed two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) identified in PHP web server deployments. While ManageEngine products are unaffected, the company has proactively updated all public-facing and internal PHP-based services to patched versions. No action is required from customers, and no evidence of exploitation or impact on customer data has been found.