PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
The Federal Office for Information Security (BSI) is warning of two critical vulnerabilities in the PHP programming language (both rated CVSS 9.2). These vulnerabilities could allow attackers to execute malicious code on affected systems without logging in.
We have reviewed the impact on PROBIS Cloud:
- PROBIS Cloud does not use PHP and is not affected by these vulnerabilities.
- This also applies to the service providers we use to operate PROBIS Cloud.
- We have no indication that our services have been affected.
You do not need to take any action regarding PROBIS Cloud.
Source: [Link to the BSI warning]