Date: 28 October 2026
Status: Updated Customer Advisory
Summary
RAD is aware of the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619, which have been reported to affect certain implementations of the PHP runtime environment and may allow remote code execution in systems utilizing vulnerable PHP-based web applications.
RAD has performed an assessment of the product families listed below based on the information currently available from public disclosures and RAD’s internal review activities.
Products Covered by This Advisory
The following RAD product families have been reviewed as part of the current assessment:
- ETX-2
- ETX-2i
- Megaplex
- SecFlow-1p/ETX-1p
- RADview
- MiTOP
- MiRIC
- MiNID
- MiCLK
- PowerFlow
- ETS-1
- ACE
- IPmux
- RIC
- SecFlow-1, SecFlow-2
- PacketLight
- Airmux
Current Assessment
Based on the information currently available and RAD’s ongoing investigation, RAD’s assessment at this time is that no impact from CVE-2026-109618 or CVE-2026-109619 has been identified for the product families listed above.
At the time of publication of this advisory, RAD has not identified the conditions required for exploitation of these vulnerabilities in the above list of product families.
Customer Actions
Based on the current assessment, RAD is not recommending any customer action, software update, configuration change, or mitigation specific to CVE-2026-109618 or CVE-2026-109619 for the product families covered by this advisory.
Customers should continue to follow standard cybersecurity best practices, including maintaining supported software releases and applying security updates as recommended by RAD.
Ongoing Investigation
RAD’s investigation remains ongoing.
This advisory reflects RAD’s assessment based on information available at the time of publication. RAD continues to review information released by software vendors, security researchers, industry organizations, and other relevant sources regarding CVE-2026-109618 and CVE-2026-109619.
Should additional information become available that affects this assessment, RAD will update this advisory and communicate any relevant findings or recommended actions to customers through the appropriate channels.
The scope of this advisory is limited to the product families listed above. RAD continues to review other products and solutions not covered by this advisory. Should any product be determined to be affected, RAD will communicate directly with the relevant customers and provide appropriate guidance and recommendations.
Disclaimer
The information contained in this advisory is provided based on information available to RAD at the time of publication and is subject to change as additional information becomes available. RAD reserves the right to update this advisory as part of its ongoing investigation and vulnerability management processes.