Security Advisory: CVE-2026-109618 and CVE-2026-109619

Security Advisory: CVE-2026-109618 and CVE-2026-109619

Dear users,

We have received enquiries regarding CVE-2026-109618 and CVE-2026-109619 which affect PHP.

We would like to clarify that PHP components are not used in our applications including ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus and AssetExplorer. Based on our assessment with our security teams, these vulnerabilities are not applicable to our applications. Therefore, any vulnerability findings related to these CVEs for the aforementioned applications can be considered false positives.