PHP Vulnerability Responses by Company

Oracle

Global cloud / infrastructure
Aliases / services
オラクル / OCI / Oracle Cloud / Oracle Linux / Oracle
Official website
https://www.oracle.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Oracle Linux

Response status
Fixed packages available
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides cloud services, databases, and Oracle Linux.

PHP errata are available for Oracle Linux 8, 9 and 10, with updates selected by OS and PHP stream.

Scope: This row covers PHP packages on Oracle Linux 8, 9 and 10 only. Solaris, Communications and Secure Backup are separate scopes.

What users should do

Apply the ELSA matching your installed packages in the Oracle Linux CVE table.

Official service URL

Source URLs

  1. Oracle Linux: CVE-2026-109619https://linux.oracle.com/cve/CVE-2026-109619.htmlResponse evidence
  2. https://linux.oracle.com/cve/CVE-2026-109618.htmlhttps://linux.oracle.com/cve/CVE-2026-109618.htmlService and operation documentation
  3. https://linux.oracle.com/errata/ELSA-2026-87070.htmlhttps://linux.oracle.com/errata/ELSA-2026-87070.htmlService and operation documentation

Oracle Communications Diameter Signaling Router

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 8.6.0 / 9.0.0. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications EAGLE Application Processor

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 17.0 / 17.1. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications EAGLE Element Management System

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 47.0. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications EAGLE LNP Application Processor

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 11.1. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications LSMS

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 14.0. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications Performance Intelligence Center (PIC) Software

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 10.4 / 10.5. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications Unified Assurance

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 6.1.1–7.0.0. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Communications User Data Repository

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 15.0. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Secure Backup

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 19.1.0.0.0–19.1.0.1.0. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation

Oracle Solaris

Response status
Patch available; customer installation required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Affected versions: 11. Listed in the official security alert.

Scope: Customer installation is not confirmed. Unsupported releases are not assumed unaffected.

What users should do

Have the contract administrator check product-specific patch instructions, install and validate.

Source URLs

  1. https://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlhttps://www.oracle.com/security-alerts/alert-cve-2026-109618.htmlResponse evidence
  2. https://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlhttps://www.oracle.com/security-alerts/cve-2026-109618verbose.htmlService and operation documentation
  3. https://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonhttps://www.oracle.com/a/tech/docs/security-alerts/cve-2026-109618csaf.jsonService and operation documentation
Related official sources
  1. Oracle Linux: CVE-2026-109619Official notice

Comments