ThinkOn Status

Critical PHP Security Advisory – CVE-2026-109618 and CVE-2026-109619

ThinkOn continues to closely monitor the recently disclosed critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our Operations and Security teams remain vigilant, and at this time, no service disruption or customer impact has been identified or confirmed in connection with these vulnerabilities. As part of our ongoing communications, we would like to highlight that Netgate has released updated PHP packages and remediation guidance for supported pfSense firewall versions. Customers utilizing pfSense firewalls are strongly encouraged to review the advisory, assess their configurations, and apply applicable security updates. Particular attention should be given to systems with administrative interfaces or Captive Portal services accessible from untrusted networks. Netgate Security Advisory: https://www.netgate.com/blog/critical-php-security-update We continue to encourage all customers to review their environments, address potentially vulnerable PHP-based applications and services, and maintain appropriate security precautions. ThinkOn will continue monitoring the situation and provide further updates should any significant developments or potential customer impacts be identified.