PHP Vulnerability Responses by Company

Fastly

Global cloud / infrastructure
Aliases / services
ファストリー / Next-Gen WAF / Fastly
Official website
https://www.fastly.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Next-Gen WAF

Response status
WAF virtual patch available; activation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides CDN, Next-Gen WAF, and related services.

Provides a Next-Gen WAF virtual patch covering both CVEs. Customers must enable it.

What users should do

Enable the relevant signal or virtual patch in the WAF dashboard, and update PHP itself.

Official service URL

Source URLs

  1. Critical RCE Vulnerabilities Discovered in Core PHPhttps://www.fastly.com/blog/critical-rce-vulnerabilities-discovered-core-php-cve-2026-109618-cve-2026-109619Response evidence
  2. https://www.fastly.com/blog/fastlys-proactive-protection-critical-php-rce-cve-2026-109618https://www.fastly.com/blog/fastlys-proactive-protection-critical-php-rce-cve-2026-109618Service and operation documentation
Related official sources
  1. Critical RCE Vulnerabilities Discovered in Core PHPOfficial notice

Comments