TrizTech has released an emergency update for its PT NGFW firewall, introducing new signatures to detect and block exploitation attempts targeting vulnerabilities CVE-2026-109618 and CVE-2026-109619 in PHP. This update serves as a compensatory security measure for organizations that have not yet applied official patches to their servers.
The identified vulnerabilities are rated at 9.2 out of 10 on the CVSS 4.0 scale. They allow remote code execution without authentication, posing the highest risk to Apache configurations utilizing the mod_php module. Successful exploitation could lead to web application compromise, data theft, and unauthorized access to corporate network resources.
The PT NGFW intrusion prevention system utilizes these signatures to identify malicious patterns within network traffic. When blocking is enabled, the system automatically stops attack attempts based on configured security policies. Customers can obtain the distribution files directly or contact technical support for assistance.
