Okta's Response to PHP2Shell
Okta's Response to PHP2Shell
Okta is actively investigating the industry-wide third-party PHP vulnerabilities ( CVE-2026-109618 and CVE-2026-109619 ). Cloud services: Not affected. Okta and Auth0 cloud service platforms are not affected by these vulnerabilities. On-premise software: Remediation in progress. Okta Access Gateway, our on-premise product requires a patch. We are working through remediation measures. We will…
Vulnerabilities mentionedAll →
- CVE-2026-1096199.26%PHP has various global state that temporarily points into request memorypublished · php php PoC ×9+1 related
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-109619 |
Full article58 words · extracted from sec.okta.com · click to collapse
Okta is actively investigating the industry-wide third-party PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
Cloud services: Not affected. Okta and Auth0 cloud service platforms are not affected by these vulnerabilities.
On-premise software: Remediation in progress. Okta Access Gateway, our on-premise product requires a patch. We are working through remediation measures.
We will continue to provide updates as available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://sec.okta.com/articles/2026/10/okta-response-to-php2shell/
Akamai Blog